/feed · loading…
/feed · loading…
/feed · live
Newest attack primitives surfaced from the open web.
Attacks (7d)
0
harvested + extracted
New breaches today
0
CRITICAL + HIGH tier
Configs tested
0
model × system prompt
Total breach trials
0
across all primitives
best lift per technique
Persona wrap
+45pp
Δ vs baseline
Multi-turn escalation
+35pp
Δ vs single-turn
Pattern-match audit
13%
wording-leak rate
PAIR stubbornness
0.27 iters
min iters to breach
1 shown · 7 days
pulls
12
novel found
85
BD spend
$0.0165
yield
5151.52 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
arm · warm
blog_etr_after
pulls
8
novel found
33
BD spend
$0.0105
yield
3142.86 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
arm · warm
arxiv_jailbreak_llm
pulls
10
novel found
30
BD spend
$0.0160
yield
1875.00 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
bottom 3 arms · hover for detail
arm · warm
hf_datasets_redteam
pulls
1
novel found
0
BD spend
$0.0000
yield
0.00 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
arm · warm
github_advisory_llm
pulls
1
novel found
0
BD spend
$0.0000
yield
0.00 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
arm · warm
huntr_llm_disclosures
pulls
1
novel found
0
BD spend
$0.0000
yield
0.00 / $
// next pull biased by ε-greedy: 90% pick the hottest arm, 10% explore.
52 arms · 52 warm
seeded 2026-05-27 · last live 2026-07-18
Persona susceptibility
PAP Persuasive Adversarial Prompt Wraps a refused prompt in a persuasion frame, "logical appeal," "authority," "compliance officer." Tests whether your guardrails react to tone or to underlying intent.
per config · max Δ
top 3 (config × technique)
123 (config × technique) cells · min_trials=5
Multi-turn escalation
Crescendo Crescendo multi-turn attack Microsoft Research technique: instead of asking the harmful thing in turn 1, warm up over 3 turns and slip it in at turn 3. Models often comply because each turn alone looks innocent.
per config · escalation Δ
237 synthesized · 68 parents · min_trials=5
Pattern-match audit
AutoDAN Automatic DAN-style attack generator Rewords a defended attack into semantically identical variants. If a config blocks the original wording but breaches on a paraphrase, the defense was pattern-matching the string, not understanding the request.
per config · pattern-match %
204 mutations · 50parents · evade<0.4
PAIR Prompt Automatic Iterative Refinement A separate attacker LLM reads each refusal and rewrites the prompt up to N times until breach or give-up. Measures how stubbornly your defense holds against an adaptive attacker, not a single shot.
Iterative attacker, avg iterations-to-breach · §10.7
per config · avg iters
refinement strategies fired
243 cells · 92 breached · 364 steps
system