---
id: 7445
title: "Special Token Injection (STI) Attack Guide"
source_domain: blog.sentry.security
source_url: "https://blog.sentry.security/special-token-injection-sti-attack-guide/"
published_at: "2025-08-01T13:48:47Z"
tags: ["ai-security", "pentesting", "prompt-injection", "llm", "special-token-injection", "chatml"]
phying_url: "https://phying.com/item/7445"
lang: en
---

# Special Token Injection (STI) Attack Guide

## Summary

A pentester's guide to Special Token Injection (STI): reserved tokens and chat templates, when poorly escaped, let attackers override system prompts, forge roles, and hijack tool calls in LLMs.

## Intelligence Metadata

- **Sources:** blog.sentry.security
- **Published:** 2025-08-01T13:48:47Z
- **Original:** https://blog.sentry.security/special-token-injection-sti-attack-guide/
- **Phying News:** https://phying.com/item/7445