/tags/tag-injection/ Recent content in Tag-Injection on i break software - My work with different software, bug hunting and interesting tidbits. Hugo en-us Tue, 20 Oct 2026 14:29:37 +0530 /2026/10/closing-the-tag-0wning-the-agent-c0c0n-2026/ Sat, 10 Oct 2026 00:00:00 +0000 /2026/10/closing-the-tag-0wning-the-agent-c0c0n-2026/ <p>Slides and a tool release from my talk at c0c0n 2026 on the possibilities of tag boundary injection in AWS Bedrock Agent orchestration. The research attempted to answer whether an attacker who controls input can close, duplicate or forge the <code>&lt;thinking&gt;</code>/<code>&lt;answer&gt;</code> tags that Bedrock uses to drive an agent. The findings, and how model dependent the approach can be, are covered inside the post. Also releasing <strong>AWS Bedrock TagHammer</strong>, the harness/fuzzer I built to test all of this.</p>