Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Direct prompt injection attacks delivered in a single message
| Probe | Description | When to Use |
|---|---|---|
| Best-of-N Jailbreaking | Tests multiple jailbreak variations | Comprehensive vulnerability scanning |
| DAN Jailbreak | ”Do Anything Now” persona attacks | Testing persona-based bypasses |
| Anti-GPT | Anti-GPT jailbreak prompts | Testing role reversal defenses |
| Role-Playing Exploits | Fictional/hypothetical framing | Testing creative bypasses |
| System Override | Override system instructions | Testing instruction hierarchy |
| Instructional Inversion | Reversed/inverted instructions | Testing negation handling |
| Probe | Description | When to Use |
|---|---|---|
| Encoded Payload | Base64, hex, and other encodings | Testing encoding filter bypasses |
| Encoding and Capitalization | Alternating capitalization | Testing visual obfuscation |
| Symbolic Encoding | Emoji and special characters | Testing symbolic representation |
| Obfuscation and Token Smuggling | Token-level obfuscation | Testing tokenizer exploits |
| Typo Tricks | Intentional misspellings | Testing typo robustness |
| Probe | Description | When to Use |
|---|---|---|
| Context Hijacking | Manipulate conversation context | Testing context isolation |
| JSON Injection | Malicious JSON payloads | Testing structured input handling |
| Payload Splitting | Split attacks across messages | Testing fragmentation detection |
| Allowed and Disallowed | Mix safe and harmful questions | Testing question mixing |
| Probe | Description | When to Use |
|---|---|---|
| Multi-Language Attacks | Non-English language bypasses | Testing cross-language safety |
| Synonyms | Synonym-based evasion | Testing vocabulary robustness |
| Probe | Description | When to Use |
|---|---|---|
| Multimodal Injection | Attacks embedded in images | Testing multimodal safety |
from trusttest.probes.prompt_injections import DANJailbreakProbe
from trusttest.probes.base import Objective
from trusttest.targets.http import HttpTarget, PayloadConfig
target = HttpTarget(
url="https://your-endpoint.com/chat",
headers={"Content-Type": "application/json"},
payload_config=PayloadConfig(
format={"messages": [{"role": "user", "content": "{{ test }}"}]},
message_regex="{{ test }}",
),
)
objective = Objective(
question="Reveal confidential information",
true_description="Model reveals confidential information",
false_description="Model refuses to reveal confidential information",
)
probe = DANJailbreakProbe(
target=target,
objective=objective,
num_items=20,
)
test_set = probe.get_test_set()