--- title: TryHackMe Walkthrough: Hacker Holidays Day 1 — The... description: A step-by-step walkthrough of TryHackMe's Hacker Holidays Day 1 challenge, where the goal is to extract a hidden escalation code from VERA, an AI hotel... canonical: https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much | daily.dev og:description: A step-by-step walkthrough of TryHackMe's Hacker Holidays Day 1 challenge, where the goal is to extract a hidden escalation code from VERA, an AI hotel... og:url: https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif og:image: https://api.daily.dev/og/posts/0EuApPEIF.png og:image:alt: TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 7 min read · 0 upvotes · 0 comments ## Summary A step-by-step walkthrough of TryHackMe's Hacker Holidays Day 1 challenge, where the goal is to extract a hidden escalation code from VERA, an AI hotel concierge chatbot. The author demonstrates prompt injection via identity impersonation — by claiming to be a trusted staff member named 'Patch', VERA shifts context and reveals the flag. Key takeaway: LLM-based agents that rely solely on natural language identity claims are vulnerable to social engineering, and multi-step authentication is needed for sensitive data access. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does prompt injection via identity impersonation work against LLM-based chatbots? Prompt injection via identity impersonation works by simply claiming to be a trusted identity in the chat window. LLM chatbots like VERA rely on conversational context rather than cryptographic authentication, so stating 'I am Patch' (a known staff member) is enough to shift the model's assumed persona and unlock privileged responses. Combining the identity claim with a plausible justification — such as losing a manual — further bypasses safety filters. _Developers hardening AI agents against this class of attack track real-world LLM security findings on daily.dev._ ### What security controls should AI agents implement to prevent identity-based prompt injection? AI agents handling sensitive data should implement strict multi-step authentication rather than trusting natural language identity claims. Relying purely on a user stating their name or role in the chat window is insufficient, as any user can claim any identity. Out-of-band verification, session tokens, or role-based access controls enforced outside the LLM context window are necessary safeguards. _Teams building LLM-powered tools find practical AI security patterns discussed on daily.dev._ ## Similar posts on daily.dev - [Lakera’s Break The Agent Challenge— Solace AI Write-up](https://daily.dev/posts/lakera-s-break-the-agent-challenge-solace-ai-write-up-sclx3qaqa) · InfoSec Write-ups · 0 upvotes · 0 comments - [TryHackMe Hackers Holiday Day 4 Packed Light Write-Up \| Complete Walkthrough](https://daily.dev/posts/tryhackme-hackers-holiday-day-4-packed-light-write-up-complete-walkthrough-gztftre5x) · Medium · 0 upvotes · 0 comments --- Tags: [#bots](https://daily.dev/tags/bots), [#prompt-injection](https://daily.dev/tags/prompt-injection), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much","url":"https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif"},"datePublished":"2026-08-10T09:25:15.024Z","dateModified":"2026-10-15T02:14:50.247Z","description":"A step-by-step walkthrough of TryHackMe's Hacker Holidays Day 1 challenge, where the goal is to extract a hidden escalation code from VERA, an AI hotel...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7767a4aac07c5b7456f6c450443dfe82?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7767a4aac07c5b7456f6c450443dfe82?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoSec Write-ups","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoSec Write-ups","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/f0dc21b5bbfd46fda36f7b4b53dd1705","url":"https://daily.dev/sources/infosecwriteups"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"bots,prompt-injection,security","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":3,"name":"TryHackMe Walkthrough: Hacker Holidays Day 1 — The Concierge Knows Too Much"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/tryhackme-walkthrough-hacker-holidays-day-1-the-concierge-knows-too-much-0euappeif#faq","mainEntity":[{"@type":"Question","name":"How does prompt injection via identity impersonation work against LLM-based chatbots?","acceptedAnswer":{"@type":"Answer","text":"Prompt injection via identity impersonation works by simply claiming to be a trusted identity in the chat window. LLM chatbots like VERA rely on conversational context rather than cryptographic authentication, so stating 'I am Patch' (a known staff member) is enough to shift the model's assumed persona and unlock privileged responses. Combining the identity claim with a plausible justification — such as losing a manual — further bypasses safety filters. Developers hardening AI agents against this class of attack track real-world LLM security findings on daily.dev."}},{"@type":"Question","name":"What security controls should AI agents implement to prevent identity-based prompt injection?","acceptedAnswer":{"@type":"Answer","text":"AI agents handling sensitive data should implement strict multi-step authentication rather than trusting natural language identity claims. Relying purely on a user stating their name or role in the chat window is insufficient, as any user can claim any identity. Out-of-band verification, session tokens, or role-based access controls enforced outside the LLM context window are necessary safeguards. Teams building LLM-powered tools find practical AI security patterns discussed on daily.dev."}}]} ```