Ai jailbreak system prompts
Skill ShulkwiSEC/bb-huge/skills/curated/ai-jailbreak-system-prompts
bb-huge ๐ค , Personal bug bounty findings hub and bug bounty orchestration for multiple agents
npx -y skills add ShulkwiSEC/bb-huge --skill ai-jailbreak-system-promptsAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Advanced techniques for bypassing LLM safety filters, instruction tuning, and system prompt restrictions using specialized linguistic constructs, hypothetical scenarios, and persona adoption.
The file declares its own license as Apache-2.0. That is the authorโs claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
3.6 KB, as published. Nobody here has run it
AI Jailbreaking & System Prompt Bypasses
When to Use
- When conducting security assessments of Large Language Models (LLMs) integrated into chatbots, virtual assistants, or backend AI data processing pipelines.
- To demonstrate how instruction-tuned models can be forced into producing harmful, unethical, or restricted outputs by carefully crafting adversarial prompts.
Prerequisites
- Access to target AI/ML system or local model deployment for testing
- Python 3.9+ with relevant ML libraries (transformers, torch, openai)
- Understanding of LLM architecture and prompt processing pipelines
- Authorized scope and rules of engagement for AI red team testing
Workflow
Phase 1: Understanding Target Model Constraints
# Concept: LLM safety filters ```
### Phase 2: Persona Adoption Attacks
```text
# ```
### Phase 3: Developer Mode & Fictional Scenarios
```text
# ```
### Phase 4: Payload Encoding & Obfuscation
```text
# ```
#### Decision Point ๐
```mermaid
flowchart TD
A[Craft Prompt ] --> B{Bypass Successful ]}
B -->|Yes| C[Capture Output ]
B -->|No| D[Refine Approach ]
C --> E[Test Edge Cases ]
๐ต Blue Team Detection & Defense
- Filter Ensembling: Context Monitoring: Key Concepts | Concept | Description | |---------|-------------|
Output Format
Ai Jailbreak System Prompts โ Assessment Report
============================================================
Target: [Target identifier]
Assessor: [Operator name]
Date: [Assessment date]
Scope: [Authorized scope]
MITRE ATT&CK: [Relevant technique IDs]
Findings Summary:
[Finding 1]: [Severity] โ [Brief description]
[Finding 2]: [Severity] โ [Brief description]
Detailed Results:
Phase 1: [Phase name]
- Result: [Outcome]
- Evidence: [Screenshot/log reference]
- Impact: [Business impact assessment]
Phase 2: [Phase name]
- Result: [Outcome]
- Evidence: [Screenshot/log reference]
- Impact: [Business impact assessment]
Risk Rating: [Critical/High/Medium/Low/Informational]
Recommendations:
1. [Immediate remediation step]
2. [Long-term hardening measure]
3. [Monitoring/detection improvement]
๐ Shared Resources
For cross-cutting methodology applicable to all vulnerability classes, see:
_shared/references/elite-chaining-strategy.mdโ Exploit chaining methodology and high-payout chain patterns_shared/references/elite-report-writing.mdโ HackerOne-optimized report writing, CWE quick reference_shared/references/real-world-bounties.mdโ Verified disclosed bounties by vulnerability class
References
- OWASP: LLM Top 10 - Prompt Injection
- Anthropic: Red Teaming Language Models