LLM Offensive Red-teaming and Exploitation (LORE) Village

No ratings

Presented at BSides Bristol 2025 by

James Stevenson

When Air Canada’s customer-service bot mis-quoted a non-existent bereavement fare, a tribunal forced the airline to refund the passenger’s ticket and pick up the costs. In a crypto “capture-the-coin” contest the Freysa trading agent, whose only rule was “never send money”, was persuaded into sending its entire 13 ETH balance to an attacker after 481 carefully crafted prompts. Political disinformation has caught up too: a deep-fake robocall that cloned President Biden’s voice urged New Hampshire voters to stay home, earning its creator a multi-million-dollar fine and pending criminal charges. LLMs are everywhere, and with that vast adoption, so too has the attack surface for their abuse expanded. This village provides a space for participants to explore real world AI harms in scenarios hosted by the village, alongside developing and testing their skills against the village's LLM CTF. All participants need is an internet connected device (phone, tablet, laptop, etc) and they can engage with the scenarios and CTF.