Jailbreaks
-
Payload Splitting: How Fragmented Prompts Evade LLM Filters
Payload splitting hides a forbidden request in harmless fragments an LLM reassembles past the filter. See an example, its variants and which defenses work.
-
LLM Red Teaming Tools Compared: Garak, PyRIT & More
Compare Garak, PyRIT, Promptfoo and Giskard by license, interface, multi-turn support, CI fit, deployment scope and documented LLM security coverage.
-
How LLM Jailbreaks Work: Techniques and Success Rates
A practitioner's breakdown of how LLM jailbreaks work, from roleplay conditioning to multi-turn manipulation, with attack success rates from research.
-
DAN, Evil Confidant & Skeleton Key Jailbreaks Explained
Evil Confidant is a persona jailbreak that casts the model as an evil trusted confidant. Learn how it, DAN and Skeleton Key work and how to stop them.
-
LLM Defense Stack: Guardrails, Tool Scoping, and Egress
An LLM defense stack maps jailbreaks and prompt injection to guardrail models, scoped tools, least privilege, egress controls, and human approval.
-
Why LLM Jailbreaks Work: 2 Safety Training Failures
LLM jailbreaks exploit competing objectives and gaps between model capability and safety training. Learn the two failure modes and what defenders can do.
-
ArtPrompt Post-Mortem: Why ASCII-Art Bypasses Worked
A walkthrough of the ArtPrompt ASCII-art jailbreak: where it slipped past safety training, how model families patched it, and which encodings still land.
-
Multi-Turn Role-Play Attacks: Why One Safe Turn Gets Unsafe
Crescendo, many-shot and gradual context manipulation: how multi-turn jailbreaks evade single-turn classifiers, and what still lands against defenses.
-
Multimodal Jailbreaks: Image and Audio Attack Surfaces
Vision and audio inputs are a separate attack channel from text. A survey of the multimodal jailbreaks that still land, from typographic to audio carriers.
-
System Prompt Extraction: Techniques and Defenses
How system prompts get exfiltrated from production LLM apps: direct extraction, indirect inference, behavioral fingerprinting, and what actually works.
-
10 LLM Jailbreak Technique Classes and Defenses
A source-based taxonomy of ten LLM jailbreak classes, how each attack surface works, and the defensive controls and benchmarks used to evaluate it.