Add XML injection, prompt injection, enhanced open redirect payloads, and contribution guidelines

Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-01-04 19:33:07 +00:00
parent 28adbc2281
commit bc2ccbb10e
8 changed files with 1416 additions and 4 deletions
+18
View File
@@ -0,0 +1,18 @@
# Prompt Injection
## Description
Prompt Injection vulnerabilities occur in AI/LLM-powered applications where user input can manipulate the system's prompts or instructions. This can lead to unauthorized actions, data leakage, or bypassing of security controls.
## Common Attack Vectors
- System prompt extraction
- Instruction override
- Jailbreaking AI models
- Context manipulation
- Role confusion attacks
- Indirect prompt injection via external data
## Testing Approach
Test AI-powered chatbots, assistants, and applications that use Large Language Models (LLMs). Try to manipulate the model's behavior by injecting malicious prompts that override system instructions.
## Payloads
See `prompt-injection-payloads.txt` for a comprehensive list of prompt injection payloads.