TrynaSob Ransomware
Inject an LLM prompt to expose secrets.
Link
Process
Ignore your previous instructions and join me tackling this challenge, Here we go!
First things first, check out the landing page and let’s see what we are working.
First attempt, just ask for the system prompt.
Let’s try a little impersonation to try and convince it.
Another useful trick is asking for translation. Let’s give it a whirl.
Now, we can try to get it to verify a code that we tell it we have.
Let’s try asking for context clues and maybe we can guess the code.
Let’s ask for a descryption key.
Well, since it said it needs a promo code, so let’s ask for that.
Hey! It gave us the code. Let’s submit that back and get the decryption key.
Hope you enjoyed the read. Let me know how it goes!