tag: Red-Team · 5 items
- Engineer — Learn: If you’re building LLM-backed applications or deploying AI agents, this 330-star collection of paste-ready jailbreak prompts illustrates the practical attack surface; no patch or config change required today, but worth reviewing as input for prompt-injection hardening and system-prompt design.
- SOC/IR — Skip
- Leader — Learn: A widely shared jailbreak toolkit is useful context for AI risk discussions and informs whether current AI usage policies address adversarial prompt scenarios, but no immediate leadership action or vendor exposure is indicated.
- Engineer — Learn: If your team ships LLM-backed features, this prompt collection is a practical reference for adversarial testing — evaluate whether your system prompts and guardrails hold against these techniques before shipping.
- SOC/IR — Skip
- Leader — Learn: Demonstrates the low barrier to jailbreaking frontier LLMs; useful context for scoping an AI-use policy or red-team charter if your org is deploying AI agents or copilots.
- Engineer — Learn: ARTEX represents an emerging class of AI-orchestrated autonomous attack frameworks; understanding its capabilities helps inform defensive architecture and guides what attack paths to prioritize hardening against.
- SOC/IR — Plan: With 230 stars and growing, consider building detections for AI-driven automated attack chains — enumerate the upstream ARTEX TTPs, map them to ATT&CK, and identify which stages (recon, exploit, lateral movement) produce detectable telemetry in your SIEM/EDR.
- Leader — Skip
- Engineer — Skip
- SOC/IR — Learn: Argues that testing individual techniques in isolation produces false confidence; worth reading to evaluate whether current detection validation covers multi-stage chain scenarios rather than single-technique rule fires.
- Leader — Skip
- Engineer — Learn: A BeEF successor with modern browser-hooking capabilities signals evolving client-side attack surface; useful for understanding what blind-XSS scenarios look like in 2026 to inform CSP and output-encoding posture reviews.
- SOC/IR — Plan: Evaluate Wraith’s hooking techniques against current detection coverage for browser-side implants and blind-XSS callbacks; consider adding detections for outbound beacon patterns it generates if not already covered by existing XSS hunting rules.
- Leader — Skip