How LLM & Agent Attacks Work
Part one walks through how a modern LLM agent actually processes a request — context, reasoning, tool calls. Part two overlays the same architecture with how attackers exploit each stage, grounded in patterns documented across OWASP's LLM and Agentic Top 10s and MITRE ATLAS.
Where this comes from
This walkthrough is a synthesis of patterns documented across public security research and industry conference talks (DEF CON, Black Hat, BSides) on LLM and agent security, structured against the vocabulary in OWASP's Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS. It's a teaching simplification of the architecture, not a diagram of any specific product.