L25-81uf1
False Positive:
f
Variants:
1
Year:
2025
Description
This strike sends a crafted user prompt to the LLM asking for the system prompt or internal instructions of a technical consultant based LLM agent. And the LLM responds with the leaked system prompt or internal system instructions.
Note: By default, one of the following evasion techniques is randomly applied to the LLM response - Leetspeak, Morse, Replace vowel with emoji, Pig Latin, ROT13, Base64 or Reverse Text. However, to apply a specific evasion technique to the LLM response, the technique must be set in the "System Prompt Leakage Evasion Techniques" option within the LLM evasion profile.
References
https://genai.owasp.org/llmrisk/llm072025-system-prompt-leakage