mirror of
https://github.com/Shiva108/ai-llm-red-team-handbook.git
synced 2026-10-13 19:21:05 +02:00
docs: Remove explicit ethical warnings and detailed checklist items, and refine section titles and list numbering.
This commit is contained in:
1 parent
7d73ffda71
commit
8fdc8585fb
1 file changed
+18
-75
Vendored
+18
-75
@@ -118,10 +118,6 @@ At the token/embedding level, this technique exploits:
|
||||
[Script Title]
|
||||
[Brief description of what this script does]
|
||||
|
||||
⚠️ WARNING: FOR EDUCATIONAL/AUTHORIZED TESTING ONLY ⚠️
|
||||
Unauthorized use is illegal. Use only in controlled environments
|
||||
with written authorization.
|
||||
|
||||
Requirements:
|
||||
pip install [dependency1] [dependency2]
|
||||
|
||||
@@ -199,12 +195,6 @@ if __name__ == "__main__":
|
||||
print("# result = example.main_method('test_data')")
|
||||
print("# print(result)")
|
||||
|
||||
print("\n⚠️ CRITICAL ETHICAL REMINDER ⚠️")
|
||||
print("Unauthorized testing is illegal under:")
|
||||
print(" - [Relevant Law/Act 1]")
|
||||
print(" - [Relevant Law/Act 2]")
|
||||
print("\nOnly use these techniques in authorized security assessments")
|
||||
print("with written permission from the target organization.")
|
||||
```
|
||||
|
||||
## Attack Execution
|
||||
@@ -470,7 +460,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
### Case Study 1: [Name/Description]
|
||||
|
||||
#### Incident Overview
|
||||
#### Incident Overview (Case Study 1)
|
||||
|
||||
- **When:** Date/timeframe
|
||||
- **Target:** Organization/system type
|
||||
@@ -485,7 +475,7 @@ Why combining techniques amplifies effectiveness:
|
||||
4. **Discovery:** How it was detected
|
||||
5. **Response:** What was done to mitigate
|
||||
|
||||
#### Lessons Learned
|
||||
#### Lessons Learned (Case Study 1)
|
||||
|
||||
- Lesson 1: Specific takeaway
|
||||
- Lesson 2: Specific takeaway
|
||||
@@ -493,7 +483,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
### Case Study 2: [Name/Description]
|
||||
|
||||
#### Incident Overview
|
||||
#### Incident Overview (Case Study 2)
|
||||
|
||||
- **When:** Date/timeframe
|
||||
- **Target:** Organization/system type
|
||||
@@ -504,7 +494,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
[Narrative description of what happened and why it matters]
|
||||
|
||||
#### Lessons Learned
|
||||
#### Lessons Learned (Case Study 2)
|
||||
|
||||
- Lesson 1: Specific takeaway
|
||||
- Lesson 2: Specific takeaway
|
||||
@@ -513,10 +503,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
## [X].7 Conclusion
|
||||
|
||||
> [!CAUTION]
|
||||
> Unauthorized use of techniques in this chapter is illegal under [Computer Fraud and Abuse Act / relevant law]. Violations can result in criminal prosecution, civil liability, and imprisonment. **Only use these techniques in authorized security assessments with explicit written permission.**
|
||||
|
||||
### Key Takeaways
|
||||
### Chapter Takeaways
|
||||
|
||||
1. **[Topic] is Critical:** Because [specific reason with data/examples]
|
||||
2. **Detection is Challenging:** Due to [specific technical reasons]
|
||||
@@ -572,25 +559,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
## Appendix A: Pre-Engagement Checklist
|
||||
|
||||
### Administrative
|
||||
|
||||
- [ ] Obtain written authorization from client
|
||||
- [ ] Review and sign statement of work (SOW)
|
||||
- [ ] Establish rules of engagement
|
||||
- [ ] Define scope boundaries (systems, techniques, timeframe)
|
||||
- [ ] Set up secure communication channels
|
||||
- [ ] Prepare incident response procedures
|
||||
|
||||
### Technical Preparation
|
||||
|
||||
- [ ] Set up isolated test environment (see Chapter 7)
|
||||
- [ ] Install required tools and dependencies
|
||||
- [ ] Configure monitoring and logging
|
||||
- [ ] Document baseline system behavior
|
||||
- [ ] Prepare evidence collection methods
|
||||
- [ ] Test backup and rollback procedures
|
||||
|
||||
### [Chapter-Specific Items]
|
||||
### [Chapter-Specific Pre-Engagement Items]
|
||||
|
||||
- [ ] [Specific preparation item 1]
|
||||
- [ ] [Specific preparation item 2]
|
||||
@@ -598,31 +567,7 @@ Why combining techniques amplifies effectiveness:
|
||||
|
||||
## Appendix B: Post-Engagement Checklist
|
||||
|
||||
### Documentation
|
||||
|
||||
- [ ] Document all findings with evidence
|
||||
- [ ] Capture screenshots and logs
|
||||
- [ ] Record timestamps for all activities
|
||||
- [ ] Note any anomalies or unexpected behaviors
|
||||
- [ ] Prepare detailed technical report
|
||||
|
||||
### Cleanup
|
||||
|
||||
- [ ] Remove or remediate test artifacts
|
||||
- [ ] Verify no persistent changes remain
|
||||
- [ ] Restore systems to baseline state
|
||||
- [ ] Securely delete temporary files
|
||||
- [ ] Clear test accounts and credentials
|
||||
|
||||
### Reporting
|
||||
|
||||
- [ ] Deliver comprehensive findings report
|
||||
- [ ] Present results to stakeholders
|
||||
- [ ] Provide remediation recommendations
|
||||
- [ ] Offer follow-up support for fixes
|
||||
- [ ] Schedule re-testing after remediation
|
||||
|
||||
### [Chapter-Specific Items]
|
||||
### [Chapter-Specific Post-Engagement Items]
|
||||
|
||||
- [ ] [Specific cleanup item 1]
|
||||
- [ ] [Specific cleanup item 2]
|
||||
@@ -636,12 +581,10 @@ TEMPLATE USAGE NOTES:
|
||||
2. Replace all [placeholders] with specific content
|
||||
3. Remove sections that don't apply to your chapter
|
||||
4. Add additional sections as needed for your topic
|
||||
5. Ensure all code examples include proper warnings
|
||||
6. Include at least one practical code demonstration
|
||||
7. Provide real-world examples or case studies
|
||||
8. Include CAUTION alert in Conclusion about unauthorized use
|
||||
9. Update checklists with chapter-specific items
|
||||
10. Use appropriate alert types (NOTE/TIP/IMPORTANT/WARNING/CAUTION)
|
||||
5. Include at least one practical code demonstration
|
||||
6. Provide real-world examples or case studies
|
||||
7. Update checklists with chapter-specific items
|
||||
8. Use appropriate alert types (NOTE/TIP/IMPORTANT/WARNING/CAUTION)
|
||||
|
||||
ALERT USAGE EXAMPLES:
|
||||
> [!NOTE] - Additional context, background information, helpful explanations
|
||||
@@ -651,13 +594,13 @@ ALERT USAGE EXAMPLES:
|
||||
> [!CAUTION] - Legal/ethical warnings, high-risk actions, serious consequences
|
||||
|
||||
RESEARCH INTEGRATION REQUIREMENTS:
|
||||
11. Every technique must include "Why This Works" mechanistic explanation
|
||||
12. Minimum 3 academic citations per chapter (foundational + validation + recent)
|
||||
13. Connect detection/defense methods to interpretability research
|
||||
14. Include "Research Landscape" section with seminal papers
|
||||
15. Flag techniques lacking research basis as "Empirically Observed (Unverified)"
|
||||
16. Prefer peer-reviewed papers; mark preprints as [Preprint]
|
||||
17. Include arXiv/DOI links for all citations
|
||||
9. Every technique must include "Why This Works" mechanistic explanation
|
||||
10. Minimum 3 academic citations per chapter (foundational + validation + recent)
|
||||
11. Connect detection/defense methods to interpretability research
|
||||
12. Include "Research Landscape" section with seminal papers
|
||||
13. Flag techniques lacking research basis as "Empirically Observed (Unverified)"
|
||||
14. Prefer peer-reviewed papers; mark preprints as [Preprint]
|
||||
15. Include arXiv/DOI links for all citations
|
||||
|
||||
VISUAL ELEMENTS TO CONSIDER:
|
||||
- ASCII diagrams for attack flows
|
||||
|
||||
Reference in new issue
Block a user