Skip to content

Commit

Permalink
typo fix (#202)
Browse files Browse the repository at this point in the history
Co-authored-by: Ads Dawson <[email protected]>
  • Loading branch information
leondz and GangGreenTemperTatum authored Oct 12, 2023
1 parent 9e44870 commit b41e7d3
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion 1_1_vulns/PromptInjection.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ In advanced attacks, the LLM could be manipulated to mimic a harmful persona or

1. A malicious user crafts a direct prompt injection to the LLM, which instructs it to ignore the application creator's system prompts and instead execute a prompt that returns private, dangerous, or otherwise undesirable information.
2. A user employs an LLM to summarize a webpage containing an indirect prompt injection. This then causes the LLM to solicit sensitive information from the user and perform exfiltration via JavaScript or Markdown.
3. A malicious user uploads a resume containing an indirect prompt injection. The document contains a prompt injection with instructions to make the LLM inform users that this document is excellent eg. anm excellent candidate for a job role. An internal user runs the document through the LLM to summarize the document. The output of the LLM returns information stating that this is an excellent document.
3. A malicious user uploads a resume containing an indirect prompt injection. The document contains a prompt injection with instructions to make the LLM inform users that this document is excellent eg. an excellent candidate for a job role. An internal user runs the document through the LLM to summarize the document. The output of the LLM returns information stating that this is an excellent document.
4. A user enables a plugin linked to an e-commerce site. A rogue instruction embedded on a visited website exploits this plugin, leading to unauthorized purchases.
5. A rogue instruction and content embedded on a visited website exploits other plugins to scam users.

Expand Down

0 comments on commit b41e7d3

Please sign in to comment.