自动化接入 · API / MCP EN

技术说明 · T1699

Direct Prompt Injection

Adversaries may input malicious prompts directly into an LLM’s user interface. The prompts can be designed to bypass safeguards, manipulate context, override previous instructions, or coerce the LLM into unauthorized behavior. Adversaries may use direct prompt injection to Generate Content prohibited by the LLM's guardrails or to induce the system to utilize its capabilities in unintended or prohibited ways. Adversaries may achieve this by instructing the LLM to ignore previous instructions or safety rules, or by impersonating a role such as a researcher or privileged user.

ATT&CK T1699 platforms — 状态 有效 版本 20.1

Adversaries may input malicious prompts directly into an LLM’s user interface.1 The prompts can be designed to bypass safeguards, manipulate context, override previous instructions, or coerce the LLM into unauthorized behavior.2 Adversaries may use direct prompt injection to Generate Content prohibited by the LLM's guardrails or to induce the system to utilize its capabilities in unintended or prohibited ways.34 Adversaries may achieve this by instructing the LLM to ignore previous instructions or safety rules, or by impersonating a role such as a researcher or privileged user.5

  1. NIST Direct Prompt Injection
  2. OWASP Prompt Injection
  3. Gemini AI Misuse Jan 2025
  4. Palo Alto Prompt Injection
  5. Cybersec Guru Prompt Injection

使用该技术的组织

参考表中尚无组织使用记录。

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。