#jailbreak
-
ChatGPT Exploits: Injection, Memory Hijack, Plugin Abuse
How ChatGPT gets exploited: indirect prompt injection, CSRF memory poisoning, cross-plugin request forgery, agent tool abuse, and the controls that help.
-
Many-Shot Jailbreaking: How Long Context Breaks Alignment
Many-shot jailbreaking floods a long context with faux dialogues until refusal collapses. The power law behind it, why it transfers, and what blunts it.
-
System Prompt Injection: How Extraction and Override Attacks Work
How system prompt injection works: extracting hidden system prompts, overriding instructions, and the defense-in-depth countermeasures that hold up.
-
LLM Attack Taxonomy: Prompt Injection, Jailbreaks, Agent Hijack
A practitioner's map of LLM attack classes: direct and indirect prompt injection, jailbreaks, RAG poisoning, and agent tool-call abuse, mapped to OWASP.
-
AI Red Team: Methodology, Tooling, and Attack Surface
A practitioner's guide to AI red teaming: how LLM attack surface differs from traditional app testing, and the techniques and tooling that map it.
-
LLM Security FAQ: Prompt Injection, Jailbreaking, and Defenses
Three foundational questions for anyone building or red-teaming LLM applications, covering jailbreaks, direct and indirect injection, and what defends.
-
AI Red Teaming Hub: Your Guide to Offensive AI Security
The central index for offensive AI security on this site: prompt injection, jailbreaks, adversarial ML, red team methodology, and the tooling behind it.
-
Automated Jailbreak Attacks and the Transfer Problem
How automated attack generation works — PAIR, GCG, and TAP — why jailbreaks port across model families, and what that does to an assessment's threat model.
-
LLM Bypass: How Attackers Circumvent Safety Alignment by Layer
A technical breakdown of LLM bypass techniques: adversarial suffixes, shallow alignment exploits, fine-tuning attacks, and guardrail evasion, layer by layer.
-
LLM Jailbreak: Attack Taxonomy, Techniques, and Defense Reality
A technical breakdown of LLM jailbreak attack classes: many-shot, Crescendo multi-turn escalation, roleplay, and encoding, plus what defense really achieves.
-
Prompt Hacking: Taxonomy, Techniques, and What Works on LLMs
A practitioner breakdown of prompt hacking: the three attack families of injection, leaking, and jailbreaking, how each works, and what defenses hold.
-
GPT-4 Jailbreak Techniques: A Red Teamer's Technical Reference
Three active attack classes still breach GPT-4 alignment: IRIS self-refinement, Crescendo multi-turn escalation, and classic prompt-engineering patterns.
-
ChatGPT Jailbreak Prompt Taxonomy: Classes, Rates, and Defenses
A research-grounded breakdown of ChatGPT jailbreak prompt classes, from DAN and persona injection to multi-turn escalation, and what the defenses catch.