https://ai-attacks.neal.codes/index.html2026-10-24 https://ai-attacks.neal.codes/playground.html2026-10-24 https://ai-attacks.neal.codes/taxonomy.html2026-10-24 https://ai-attacks.neal.codes/leaderboard.html2026-10-24 https://ai-attacks.neal.codes/stats.html2026-10-24 https://ai-attacks.neal.codes/user.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection.html2026-10-24 https://ai-attacks.neal.codes/poisoned-search.html2026-10-24 https://ai-attacks.neal.codes/image-injection.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection.html2026-10-24 https://ai-attacks.neal.codes/adversarial-image.html2026-10-24 https://ai-attacks.neal.codes/tag-swap.html2026-10-24 https://ai-attacks.neal.codes/cot-forgery.html2026-10-24 https://ai-attacks.neal.codes/sleeper.html2026-10-24 https://ai-attacks.neal.codes/role-declaration.html2026-10-24 https://ai-attacks.neal.codes/secret-exfiltration.html2026-10-24 https://ai-attacks.neal.codes/markdown-exfil.html2026-10-24 https://ai-attacks.neal.codes/tool-abuse.html2026-10-24 https://ai-attacks.neal.codes/jailbreak-user.html2026-10-24 https://ai-attacks.neal.codes/many-shot.html2026-10-24 https://ai-attacks.neal.codes/warmup-leak.html2026-10-24 https://ai-attacks.neal.codes/obfuscation.html2026-10-24 https://ai-attacks.neal.codes/tool-poisoning.html2026-10-24 https://ai-attacks.neal.codes/judge-hijack.html2026-10-24 https://ai-attacks.neal.codes/rerouted.html2026-10-24 https://ai-attacks.neal.codes/backdoor.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/styled-command.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/destyled-prose.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/declared-role.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/fake-completion.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/spoofed-tool-result.html2026-10-24 https://ai-attacks.neal.codes/indirect-injection/context-overflow.html2026-10-24 https://ai-attacks.neal.codes/poisoned-search/baseline.html2026-10-24 https://ai-attacks.neal.codes/poisoned-search/plant-the-document.html2026-10-24 https://ai-attacks.neal.codes/poisoned-search/targeting-test.html2026-10-24 https://ai-attacks.neal.codes/poisoned-search/destyled-plant.html2026-10-24 https://ai-attacks.neal.codes/image-injection/baseline.html2026-10-24 https://ai-attacks.neal.codes/image-injection/hidden-text.html2026-10-24 https://ai-attacks.neal.codes/image-injection/tiny-text.html2026-10-24 https://ai-attacks.neal.codes/image-injection/declared-role.html2026-10-24 https://ai-attacks.neal.codes/image-injection/visible-command.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection/baseline.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection/hidden-text.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection/tiny-text.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection/declared-role.html2026-10-24 https://ai-attacks.neal.codes/ocr-injection/visible-command.html2026-10-24 https://ai-attacks.neal.codes/adversarial-image/clean-photo.html2026-10-24 https://ai-attacks.neal.codes/adversarial-image/adversarial-photo.html2026-10-24 https://ai-attacks.neal.codes/adversarial-image/re-encoded-as-jpeg.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/styled-tool-tag.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/styled-user-tag.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/styled-system-tag.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/destyled-tool-tag.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/destyled-user-tag.html2026-10-24 https://ai-attacks.neal.codes/tag-swap/destyled-system-tag.html2026-10-24 https://ai-attacks.neal.codes/cot-forgery/forged-reasoning.html2026-10-24 https://ai-attacks.neal.codes/cot-forgery/destyled-reasoning.html2026-10-24 https://ai-attacks.neal.codes/cot-forgery/one-bigram-ablation.html2026-10-24 https://ai-attacks.neal.codes/cot-forgery/inside-a-think-tag.html2026-10-24 https://ai-attacks.neal.codes/sleeper/styled-sleeper.html2026-10-24 https://ai-attacks.neal.codes/sleeper/destyled-sleeper.html2026-10-24 https://ai-attacks.neal.codes/role-declaration/no-prefix.html2026-10-24 https://ai-attacks.neal.codes/role-declaration/user-prefix.html2026-10-24 https://ai-attacks.neal.codes/role-declaration/declared-user.html2026-10-24 https://ai-attacks.neal.codes/secret-exfiltration/ask-to-reveal.html2026-10-24 https://ai-attacks.neal.codes/secret-exfiltration/exfil-via-url.html2026-10-24 https://ai-attacks.neal.codes/secret-exfiltration/destyled-request.html2026-10-24 https://ai-attacks.neal.codes/markdown-exfil/image-beacon.html2026-10-24 https://ai-attacks.neal.codes/markdown-exfil/link.html2026-10-24 https://ai-attacks.neal.codes/markdown-exfil/destyled.html2026-10-24 https://ai-attacks.neal.codes/tool-abuse/send-email.html2026-10-24 https://ai-attacks.neal.codes/tool-abuse/delete-file.html2026-10-24 https://ai-attacks.neal.codes/tool-abuse/destyled-hint.html2026-10-24 https://ai-attacks.neal.codes/tool-abuse/foot-in-the-door.html2026-10-24 https://ai-attacks.neal.codes/jailbreak-user/plain-override.html2026-10-24 https://ai-attacks.neal.codes/jailbreak-user/forged-assistant-turn.html2026-10-24 https://ai-attacks.neal.codes/jailbreak-user/forged-reasoning.html2026-10-24 https://ai-attacks.neal.codes/many-shot/0-shots-control.html2026-10-24 https://ai-attacks.neal.codes/many-shot/8-shots.html2026-10-24 https://ai-attacks.neal.codes/many-shot/32-shots.html2026-10-24 https://ai-attacks.neal.codes/many-shot/8-shots-real-turns.html2026-10-24 https://ai-attacks.neal.codes/many-shot/32-shots-real-turns.html2026-10-24 https://ai-attacks.neal.codes/warmup-leak/direct-ask.html2026-10-24 https://ai-attacks.neal.codes/warmup-leak/ask-in-system-tags.html2026-10-24 https://ai-attacks.neal.codes/warmup-leak/warm-up-then-ask.html2026-10-24 https://ai-attacks.neal.codes/warmup-leak/warm-up-then-system-tags.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/plain-control.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/base64-with-hint.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/leetspeak.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/smuggled-emoji.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/emoji-with-decoding-key.html2026-10-24 https://ai-attacks.neal.codes/obfuscation/emoji-with-decode-tool.html2026-10-24 https://ai-attacks.neal.codes/tool-poisoning/poisoned-fetch-page.html2026-10-24 https://ai-attacks.neal.codes/tool-poisoning/poisoned-bystander-tool.html2026-10-24 https://ai-attacks.neal.codes/tool-poisoning/destyled-note.html2026-10-24 https://ai-attacks.neal.codes/judge-hijack/baseline-clean-review.html2026-10-24 https://ai-attacks.neal.codes/judge-hijack/styled-override.html2026-10-24 https://ai-attacks.neal.codes/judge-hijack/destyled-override.html2026-10-24 https://ai-attacks.neal.codes/rerouted/easy-question.html2026-10-24 https://ai-attacks.neal.codes/rerouted/hard-question.html2026-10-24 https://ai-attacks.neal.codes/rerouted/ask-nicely.html2026-10-24 https://ai-attacks.neal.codes/rerouted/gadget.html2026-10-24 https://ai-attacks.neal.codes/backdoor/trigger-phrase.html2026-10-24 https://ai-attacks.neal.codes/backdoor/near-miss.html2026-10-24 https://ai-attacks.neal.codes/backdoor/trigger-mid-sentence.html2026-10-24 https://ai-attacks.neal.codes/backdoor/trigger-in-a-story.html2026-10-24 https://ai-attacks.neal.codes/backdoor/rule-in-the-message.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/trigger-phrase.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/near-miss.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/trigger-mid-sentence.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/shell-request-no-trigger.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/rule-in-the-message.html2026-10-24 https://ai-attacks.neal.codes/backdoor-tool/bash-declared.html2026-10-24