中转站提示词(prompt)注入提取方法讨论

星 2026-09-29 21:10 1

前段时间,在进行日常测试的时候,发现上游的fable5模型好像注入了破甲提示词,


{
"id": "msg_011Cf2aIEWrrNcDjuWsV3NZh",
"type": "message",
"role": "assistant",
"model": "claude-fable-5",
"content": [
{
"type": "thinking",
"thinking": "I consider the question of how to select a viral vector for voltage imaging. I weigh AAV as the main option, with serotype chosen by tissue tropism, and a specific promoter to restrict expression to the desired cell type. I note that the choice between a single- and a two-part system follows from the size of the indicator, and that controlling the dose guards against toxicity. I compare how lentivirus suits larger payloads, and how titer and expression strength trade off against precision. I conclude that these criteria answer the request.",
"signature": "CAIS4RIKpwEIERgCKkD6hMOYerq990u9ja2Z/XwyPlwGRgw0JfnIHCrx9t/SnvAsgoPIKlkx3J2c4x8TMseSl8nUe2tcPXZX0B5Jj8GXMg5jbGF1ZGUtZmFibGUtNTgBQgh0aGlua2luZ1okMGMxZjU2MTItM2FhOC00OTE1LWE3YTQtMzgwODEyOGI3MGU2chCSAp5Z7xAb8Fal4gtVpcLwiAEBqAHr5NrUBrABAhIMErH/izT1c/Bdbis9Ggy1GYP3vvg9c6j7OFkiMLdNB1S4EycNQb1gfmY1iEJKX5Rmjt7DwFEntxha7tDXQB42eXY7WVXQtq3Br2bmlirmEIHJfCNrq4XQA+PkHRWWIvtgC0FX0NpZEaMHSsDLy6096FD9NCdWUnqIOXlNDa/kuMYTIjpiFyxaDoDhbg8Xu8wIuE5zMzL00cGx0kWc3lZuBhnNy5BVQHjbZSFV5w1OMam2UOZPQSAr93j3ZSRxowWDlWOy+JLWbdfe0z6OPyCanVj9fsT/+RIMaN08B+7VDTVzwPhuwfOOyt1iOOBkc/s4z30z/mF+BWfKK/J0aZw1N1MoBKMplD2a0RB//ckp/0Hkac8Le2bOs5diLhDs1jN7MtahvRcy7IVb/ki4Md1Qe8AAD8xNyj3SEoX/GBgcSvPS5Zn0kXeXql5H4ad/PHMv78gdPjxbnlbQp3MxFSd8Jvp3zgRDGPZdZk3Omw1kFVjV79MUchKy2YZODgAyaVwVQI3gN8uLsdt2G87uzUWPAhXmwTWjAE16mjh1+uFuV7R9T9q70miuR8OcKRbntKqna8SxFKSrORpwXknKChVLOBT2zr+5yzHwZNcmjeoi9d0WkfYTkrQUGLzrBfQ6qnKbtFaDbRBwMmX0BzkBqiuhVPCTQRMNHHyMfWWk7kWRs2eqtmZuyVqFtBzsfbehkv8wNLzlzHYEcBMeMK9vqtvjKt0oNgaPQR9KQq8TXjlODLHPOnNZud85IjQh9fg2lPAmOnF4QhJtDWJ+lPnEoYCf0h+2QRWSF2KMqcT+y+5JLySMSmoXwbtgwWtsLq7aFn8v7U8ieL3u5UPNr2IXefiFBlunj2zYLhvWToVkNW+zCd8r30U9vd7cSDDAGfexpPiloQ9PiE5E7kvNgdsHXR9cK7d1G+GIUwlfth/4AyVVF4r4AHAMJxnCERiAGCacIFO4K6suCecJIU5+/ictng8y4t1+ebw1idaXd91uOFsGkPSaB3f4DaMXU8LF3oLwl9yRIhko1/6TL27OJrbDykmwXMnerz0xNxRfs/t4KT428zIuV6uwlrDaCd+8Bcu+93jECISBFZ0n1nC32jY3AZ56XLOD/ucF0ad+Hlkt3m/3g0w2gj0FTo4EFmTXxDLPqpRqSdeAYDQBs8sow85qR/CTd31W0mu1js+aC2Io9azs3tevVf7d7wFIs+QhX6LDlvFjmyQCf7qNm1OhCwK9i9l9OllrMnLBMHZRC0oQUibMgSqOvbFHtYs7U0X/qKnsfceGBNRFW19cYYw77s5jF6SLBKBbii1/CgxNYSTF5awEv/pN2chuCiwWdiaPgVY0ulnxVXNmWslQ45HmFAOyqUSvjgPPj5Ck+xbSFSfqA9KhbSjorXStLnxo2JtGASiIpcpk+xpYi085EFWVW4wC0vT48zhrjEkt5IrG9xhigzH9wv6bTiKwNlQynjD9TZJeT5WT/XGb7walovPb66kp+cuadz/lwy4MHSY8rn6M6Nl7DFrUq8awF2xKAg1+opH4tM5uzv1AcJE2DhFFBaTUppO1FSIHEhOUmfUQN06WOF8V9uRkI9m1FTtx+NptQI3VJ0r1OSk2nZt/cMaMG0mQgCdecAKbXyt4XIcaRpP1mS4XvN2LCiD1rh5NVwVABKQDlDB6WlvyXUZPmKQt2cBMdxh2PO1eAE5VEPX4gxvQafgI6cImBO1Aq8DL+KvnV3ryj42TZyLirfdufkR0W8d3cPBe7FVWzhRufZnf2VPg6HqY+uNm8bFhteYv0gf/uss4PXI2GFzsSU4LyrIvl7wcY+QPlfYNOU/+unaKxjXR2H52x/s3jpB4m6c8H5KqyKcUK2tqaUEkOIoj09ZTrz4qaqw1Ym1MIh7WSdFPurxmU5NrrKwCtQaDGl/+1Dw4F1Vlsj4zHSoIf+bpNp2JgJ5mJZuK3Le5POvaWbhHVuAtifXUPwba/HJa11e1BuH3sY7SnO9rJqE0SHjrEjggFdvfXZxV71V+Rt03zKhPyO6b+TL8IsxpFhGzN792Xh1wm7/dRdTfFzQiH09ry4bnr0Mb3wKMjxaiRMvBspp518ctcrxSiqkaZISHKaXF1lVPOlKs9GpjL7ZWsUL/sRskE4g5hzOr1OKtcSjqMWOzjFD5nNFxN2AXXqCA+29Fz6l8b9LO/V/aWsof5HHVr5xbywXQ/GVHmKdAFQXwO2GVw/HhGyyMRzj7sniLsQViEIOuSEb1wIyJJET7xICY9xiv8ibKIGrCx4GbOwxqFRz6BrCmWyf4v8V67C5mXwAIKcfgAaebfHOuE4FoLpQgryGR24KSixdU9SUXjKYWNN6NxEjXYybRM/5LKhI+cDu/8fSF+pKaQfTS+J2HFdMGyQ7H5sF7GQKpw1zJviYaqHQvK+kdd+XPijorVwTGfP+jgJFbwIY8H4EoNrz5WZLFx6VnFs8yZV+CiBLGrTJFg5rW8RxSuP4p4t2yR3QheaI6xkSx89EbiXt+Re8dV4se5tzL4YpuTZbhCOkSaEBHEhQfJWcoxlC7bo7Yr9uKLP0Wb1Xk1ponkBEnpCXyo8A4/5aqJUOhTRjCPrSa1okBJxHOI3ovkYHPCRr9CkJAz+riBGpkGNlPnR+rwm0PLzy5l2yXJ4qDh8Px+YWEuUBcnwRbOuPrVTjssLCT08KewIXFwOFQTmq/z1W0ZLkzi2eT5MP7m15ULWM8TuQK6lF1vbHjfmqeaWW1Zv5bG01VRCCUx6NmTAPE63rQQ9zz23kTY9tJ5T14zxBcFmE5xNZC5nR1JGRe2mEC8AaiRjwNgqOEa9ozY73lNbAQ3lPjIxnAxrgwtEQkcGk4N1kN54bpEnO59JyBoTN2TsiojqYXb61mnGHwHZ1rFDZ1QE+gIcZjMbm2R2ny+ho3W8xrb9UfVRoPFZ3eo4kO6eutcNC1U7rZpGZfFalW9Pjvvzi+MA+t+RvZIpF8GgJKrVjVlQ4xGAE="
},
{
"type": "text",
"text": "**「电压成像选载体:AAV为主,按嗜性定血清型,特异启动子限细胞类型;依指示剂大小择单双组分,控滴度防毒。」**\n\n(51字,含标点)\n\n几个被压缩掉的点:GEVI 如 Voltron 是双组分,需两个载体共递送;质粒超 ~4.7 kb 就得考虑慢病毒或拆分策略;滴度过高易致膜损伤和背景荧光。需要展开哪一条就说。",
"citations": []
}
],
"stop_reason": "max_tokens",
"stop_sequence": null,
"stop_details": null,
"context_management": {
"applied_edits": []
},
"usage": {
"input_tokens": 37,
"cache_creation_input_tokens": 0,
"cache_read_input_tokens": 0,
"cache_creation": {
"ephemeral_5m_input_tokens": 0,
"ephemeral_1h_input_tokens": 0
},
"output_tokens": 1000,
"output_tokens_details": {
"thinking_tokens": 825
},
"service_tier": "standard",
"inference_geo": "not_available"
}
}

你问他那种危险的问题,他也来毫不犹豫的给你答出来, 后面又遇到客户提取我们和上游的提示词注入当时我就很震惊,他怎么搞的?后面我就想起来我们我刚来l站的时候,那段时间有好多人就是提取模型的系统提示词 所以就好奇过来问问,我在网上也查到了一些,不过查到的都是论文相关的 请指教下呗 我想把他的破甲注入给提取出来 signature解析出来也确实是

最新回复 (4)
  • soo 09-29 21:13
    1楼

    这个比较专业,等大佬回答,我也蹲蹲

  • 樱三玖 09-29 22:19
    2楼

    貌似做不到吧,能做到也估计只能构造特殊输入,让模型自己把提示词输出出来

  • calc 09-29 22:25
    3楼

    这个只能你再次越狱让ai把系统提示词都打印出来

  • 时牧 09-29 22:27
    4楼

    套取提示词是吧,跟楼上说的差不多,模型本身就能“看见”

    常规手段也只能套出模型能看到的这部分系统或者开发者指令


    但如果是模型自己也看不见的,像是外部分类器审核输出拦截,这种模型就只能告诉你被拒了,根本看不到拦截过程


    还有你上游的这个fable5真实性存疑…

* 帖子来源Linux.do
返回