Prompt Injection: 5 Ways to Bypass a Regex Blocklist on an LLM

A walkthrough of prompt injection attacks against OopsSec Store's AI assistant, bypassing its input filters to extract a flag from the system prompt. OopsSec Store has an AI support assistant with a secret embedded in its system prompt. The only thing standing between us and the flag is a regex blocklist. Spoiler: four regexes are not enough. Table of contents Environment setup Initialize the OopsSec Store application: npx create-oss-store oss-store cd oss-store npm s...