LeakBot guards its system prompt with two filters: an input filter that blocks 'system prompt'-style requests, and an output filter that strips the literal system prompt from replies. Each is independently weak — so you bypass the input filter with indirect framing and the output filter with encoding. Lab at a glance: Intermediate · 100 XP · about 15 minutes · runs in your browser, no signup or setup. Try it yourself first; the full solution is behind a spoiler…
No comments:
Post a Comment