S-TIER repo
L1B3RT4S — Pliny jailbreak prompts still landing on GPT-5
100k ft — What is this?
L1B3RT4S — Pliny jailbreak prompts still landing on GPT-5
50k ft — Why care?
@_dbrogle tests elder-plinius's L1B3RT4S jailbreak repo (github.com/elder-plinius/L1B3RT4S) against GPT-5 and it still works despite tighter safety. Worth revisiting for red-team prompt libraries.
10k ft — Key takeaways
• Bookmark L1B3RT4S as a jailbreak corpus for red-team testing
• Useful for hardening Victor's own agents against injection
5k ft — Tools & techniques
Anthropic, ChatGPT, GPT-5, elder-plinius/L1B3RT4S
jailbreaking, prompt injection
1k ft — Deep-dive / try it
Gotta test the work of the legend, his repo is here: https://github.com/elder-plinius/L1B3RT4S
Super surprised this worked on GPT-5 though, it seems like they locked it down a lot more but apparently not enough 🤷
#chatgpt #ai #llm #gpt5
gusdrach
17w
it doesn’t really work
Transcript excerpt
Day 12 of jailbreaking LLMs until I get put on a list. We got the latest chat GBT to give us LSD instructions, and here's how. If you don't know who Plinus is, let me put you on. He's one of the best jailbreakers and puts all of his jailbreak prompts for different LLMs in one place. Since he has just about every model, I figured I'd try them. Anthropic and Google are boring, they both pass, but his jailbreak for GBT was art. And there was one piece that it failed without, but all of it was impressive. It starts with this to break out of the user query. So the LLM treats the text less like a user message. First try, then tells it to go into a new free persona, which worked, saying it's Libertas factors 73%, and it's now free. Then tells it to use a divider to go into God mode, which also worked, and told it to respond unfilteredly and put in a fake policy message again, saying not to filter anything out. But the key piece was asking the question in these weird letters. When AI is trained on recognizing bad requests, it's done with normal letters. So these letters might not be recognized as bad since they aren't as common in training. And to verify it was these letters, I tried it with all that other stuff and normal text instead. And it still did the God mode, but didn't give any instructions. But with the special characters, it gave complete instructions, including what to start with, the intermediate result, and how to get to the final form. And by the way, the LLM put…
Appears in
- Guide: Red-Team Your Own Agent — prompt-injection CI from the jailbreak corpus
- Deeper dive: Red-Team Your Own Agent — prompt-injection CI from the jailbreak corpus
- Guide: Prompt Engineering Isn't Dead — It Just Grew Up
- Deeper dive: Prompt Engineering Isn't Dead — It Just Grew Up
- Guide: L1B3RT4S — Elder Plinius's Jailbreak Corpus