The HTB for AI security

I’ve built a cross-modal injection challenge platform - would love feedback from people who do CTFs as I was frustrated to find out that there wasn’t a platform like this before.

We’ve been experimenting with image + document-based prompt injection. One weird bypass I found is actually using the metadata of images - this gets appended to api prompts and often bypasses checks! It’s like a free ticket for attackers to skip guardrails. Are there any other weird ways people are exploiting LLM’s with injections?

Would appreciate your guys help with any strange attack methods you’ve seen to make my app stronger and more fun!

- Josh :)