PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PIChef. A tool for Prompt Injection inspired by CyberChef

blog.sentry.security | blog | #prompt-injection | #llm | #tooling | #pichef | #sentry
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# PIChef. A tool for Prompt Injection inspired by CyberChef #### Sentry 08 Oct 2026 — 6 min read Share Baba Yaga represents PIChef as a keeper of dangerous recipes, mixing strange prompt-injection...
Published
Collected

Related coverage

research · projectdiscovery.io
How abliterated models can get you pwned
# How abliterated models can get you pwned Oct 6, 2026 · Prince Chaddha Any open model whose weights have been edited can carry a backdoor, whether it's a task-specific fine-tune, a merged adapter...
blog · blog.sentry.security
Exploiting Tool and Function Calling in LLM Agents
Exploiting tool and function calling in LLM agents: exposed messages[], privileged roles, and unescaped control tokens let attackers steer agent actions, echoing OWASP LLM06 Excessive Agency.
blog · blog.sentry.security
Semantic vs. Token-Based LLM Injections
Contrasting two LLM injection classes: semantic attacks use natural language to override instructions; token-based attacks exploit tokenizer quirks like reserved delimiters and adversarial suffixes.
blog · blog.sentry.security
LLM API Misconfigurations
How LLM API misconfigurations break trust boundaries: exposed messages[], privileged roles, model choice, or generation parameters enable role injection, parameter tampering, and runaway token usage.
blog · blog.sentry.security
Special Token Injection (STI) Attack Guide
A pentester's guide to Special Token Injection (STI): reserved tokens and chat templates, when poorly escaped, let attackers override system prompts, forge roles, and hijack tool calls in LLMs.
blog · blog.sentry.security
ChatML Role Injection (CRI)
Attackers can inject system roles into ChatML message arrays to override developer instructions, invoke hidden tools, and pad payloads for denial-of-wallet DoS; strict schema validation is key.
Back