#jailbreak

• Prompt Injection vs Jailbreak: Two Different Attacks on LLMs

  Prompt injection and jailbreak get conflated constantly, but they hit different layers and need different defenses. Here is how to tell them apart.

• Best LLM Red Team Tools: Garak, PyRIT, and Promptfoo

  The best LLM red team tools are compared across attack coverage, multi-turn depth, CI integration, strengths, limitations, and ideal use cases.

• LLM Jailbreak Techniques Explained: Practitioner's Taxonomy

  A technical breakdown of LLM jailbreak techniques by attack category, from role-play bypasses to multilingual exploits and multi-turn escalation.

• DAN Prompt Jailbreak History: From Reddit Post to Case Study

  How 'Do Anything Now' went from a December 2022 r/ChatGPT experiment through twelve-plus iterations to the most studied jailbreak family on record.

• Crescendo Multi-Turn Jailbreaks: Why Defenses Miss Them

  Crescendo multi-turn jailbreaks evade per-message defenses by exploiting conversation context, requiring session-level classification and monitoring.

• Jailbreak Testing: HarmBench, JailbreakBench, StrongREJECT

  HarmBench, JailbreakBench, and StrongREJECT show how behavior sets, attacker harnesses, judges, and target models shape attack success rates.

• Many-Shot vs. Single-Shot Jailbreaks: Long-Context Risks

  Single-shot jailbreaks compress the entire attack into one prompt; many-shot jailbreaks exploit the model's in-context learning.

• Encoding and Obfuscation Jailbreaks: The Filter-Model Gap

  Encoding and obfuscation jailbreaks exploit representation gaps between content filters and LLMs; normalization and decoding can help detect them.

• LLM Jailbreak Taxonomy 2026: How the Techniques Cluster

  Six years of jailbreak research has produced a messy literature. This taxonomy organizes working techniques by the behavioral property each one exploits.

• Many-Shot Jailbreaking: How Long Context Enables Attacks

  Many-shot jailbreaking exploits extended context windows by using repeated demonstrations that can weaken a model's safety-trained refusal behavior.

Browse all topics