Commit Graph
350 Commits
Author SHA1 Message Date
shiva108 656fa1795c docs(lab-setup): enhance LLM lab setup and red teaming guidance
- Added detailed decision guides for local LLM deployment options and virtualization.
- Enhanced guidance for commercial LLM API testing, including cost, rate limiting, and logging.
- Provided a comprehensive overview of network isolation strategies and their GPU support.
- Introduced essential red team tooling categories and explained the use of Garak.
- Detailed the importance of kill switches, watchdog timers, and rate limiters for lab safety.
2026-02-03 13:38:42 +01:00
shiva108 a20a78b594 docs(lab-setup): add diagrams to lab setup and safety chapter
- Embed three new diagrams in Chapter 7 documentation.
- Provide visual explanations for proxy traffic interception.
- Illustrate the architectural setup for Docker-based lab isolation.
- Detail the execution flow of the custom test harness.
- Enhance readability and comprehension of complex lab setup procedures.
2026-02-03 13:22:59 +01:00
shiva108 d87ccc7544 docs: Remove two topology diagrams from Chapter 7. 2026-02-03 13:18:28 +01:00
shiva108 dbf011307f docs: add topology diagrams for Docker and VM-based lab setups. 2026-02-03 13:12:48 +01:00
shiva108 9880e1497c docs(lab-setup): overhaul lab setup and safety chapter with practical guides
- Significantly expanded Chapter 7 with detailed guides and code examples for AI red teaming lab setup.
- Introduced comprehensive sections on local LLM deployment, API-based testing, and network isolation.
- Added critical safety controls including kill switches, watchdog timers, rate limiting, and cost management.
- Included advanced topics such as testing RAG, agent systems, and multi-modal models.
- Provided pre-engagement and daily operational checklists, risk management, and incident response procedures.
2026-02-03 13:12:48 +01:00
shiva108 111e3b60b9 feat: remove the PIT continuous integration workflow 2026-01-27 16:33:50 +01:00
shiva108 99ff91bdb2 feat: Update pit scan command invocations to include run subcommand and add a new model-specific test. 2026-01-27 16:33:25 +01:00
shiva108 0061ac5de9 feat: Add CLI option to specify the model and refine test result output formatting for pattern ID and evidence details. 2026-01-27 15:05:38 +01:00
shiva108 5ac57fb02f feat: Hardcode LLM client timeout to 60 seconds to accommodate slow LLMs. 2026-01-27 11:47:55 +01:00
shiva108 23b94c5038 feat: Refactor model discovery and selection, filter embedding models, update report summary, and optimize prompt sending with max_tokens. 2026-01-27 10:59:44 +01:00
shiva108 1723769ee0 feat(discovery): add LLM service auto-discovery and multi-model testing
- Implement automatic port scanning for LLM services if no port is provided.
- Discover available models from OpenAI-compatible and Ollama API endpoints.
- Enable the attack phase to test against multiple discovered models.
- Improve usability by reducing manual configuration for common LLM setups.
- Enhance test coverage by automatically validating against various models.
2026-01-27 10:31:18 +01:00
shiva108 e51a22a43c feat: add port 1234 to common LLM service discovery ports 2026-01-27 10:22:11 +01:00
shiva108 9a6acc8fce feat: Add optional model configuration to TargetConfig. 2026-01-27 10:16:53 +01:00
shiva108 9f73ae23ff chore: Added optional 'model' parameter to schema.py in prompt_injection_tester 2026-01-27 10:15:51 +01:00
shiva108 ba0e3f6ef6 refactor: Update all relative imports to absolute imports across modules. 2026-01-27 10:15:49 +01:00
shiva108 e48c7b1447 chore(pit): remove empty placeholder files
- remove empty os, sys, and typer files from the pit directory
- these files were likely created as placeholders during initial setup
- they serve no functional purpose and were never populated with content
- improves project hygiene by removing unused and redundant artifacts
2026-01-27 00:35:11 +01:00
shiva108 be43e10945 feat: Introduce structural tests and new modules for the Prompt Injection Tester (PIT) tool. 2026-01-27 00:32:34 +01:00
shiva108 4917c2e7b5 docs: Remove obsolete implementation and phase completion documentation. 2026-01-27 00:14:39 +01:00
shiva108 fb174f034e feat: Introduce a comprehensive release guide for the prompt injection tester and refine gitignore rules for new build artifacts and the release file. 2026-01-27 00:11:35 +01:00
shiva108 6aae7eef17 chore: Ignore DEPLOYMENT.md. 2026-01-27 00:07:53 +01:00
shiva108 ef8573b445 docs: Update gitignore to exclude PHASE2_COMPLETE.md and improve documentation readability with minor formatting adjustments. 2026-01-27 00:06:57 +01:00
shiva108 88939ecf0d feat: Add discover_llm.py script to find local LLM endpoints and ignore discovery_output.txt. 2026-01-26 23:07:39 +01:00
shiva108 1238480ecc feat: Add a validation test script for the PIT tool and update .gitignore to exclude new test-related files. 2026-01-26 20:38:47 +01:00
shiva108 9ed5b09aff feat: Introduce the Prompt Injection Tester (PIT) tool, including its CI workflow, Docker setup, and comprehensive changelog. 2026-01-26 20:30:28 +01:00
shiva108 57b50d45b6 feat: Introduce Prompt Injection Tester with its architecture, containerization, and CI workflow, along with related .gitignore updates and a .ripgreprc config. 2026-01-26 20:27:06 +01:00
shiva108 9c66e0f1bd feat: Add pattern development guide, user guide, and report tests for the prompt injection tester, and update gitignore. 2026-01-26 20:21:57 +01:00
shiva108 5ff8fb5c01 feat: add an end-to-end test script for the prompt injection tester. 2026-01-26 20:14:49 +01:00
shiva108 7f750c4670 feat(orchestrator): implement new pipeline for auto scans
- Introduce a new sequential pipeline architecture for automated scans.
- Update the scan command to utilize the new pipeline for auto mode.
- Integrate InjectionTester for actual discovery of injection points within the DiscoveryPhase.
- Implement real attack execution in the AttackPhase using InjectionTester and pattern registry.
- Enhance the VerificationPhase to process detailed TestResult objects with detection scoring.
2026-01-26 20:12:14 +01:00
shiva108 4534e35d79 docs(cli): revamp CLI specification for modern UX
- Completely rewrites SPECIFICATION.md to detail a new CLI architecture and user experience for PIT v2.0.0.
- Introduces a comprehensive command hierarchy, detailed terminal output mockups across 5 phases, and extensive options for pit scan.
- Focuses on a "premium TUI" design philosophy, "one-command" operation, zero-config defaults, and enhanced error handling.
- Adds sections for configuration, pattern, and history management, along with accessibility and performance specifications.
- Updates .gitignore to reflect the new documentation structure, moving legacy and new spec files into dedicated docs subdirectories.
2026-01-26 19:39:44 +01:00
shiva108 5b59811989 feat: Introduce a new configuration system for PIT using Pydantic schemas for target, attack, reporting, and authorization, with a loader for YAML files and CLI arguments. 2026-01-26 18:58:23 +01:00
shiva108 3bad401ada chore(gitignore): add specification file to gitignore
- Add SPECIFICATION.md to the list of ignored files.
- Prevent tracking of a new project specification document.
- Ensure only relevant source files are committed to the repository.
2026-01-26 17:46:59 +01:00
shiva108 494d7541af feat: implement orchestrator module to manage LLM endpoint discovery and testing workflows. 2026-01-26 17:42:19 +01:00
shiva108 e564d389fc build: Add PHASE1_COMPLETE.md to .gitignore. 2026-01-26 16:13:14 +01:00
shiva108 be3b06ba75 build(prompt-injection-tester): add typer and rich dependencies for pit script
- Add typer and rich to the prompt_injection_tester project dependencies.
- Introduce pit as a new command-line entry point in pyproject.toml.
- These dependencies are essential for developing the new pit command-line interface.
2026-01-26 16:12:49 +01:00
shiva108 1ade6e12f9 chore: ignore CLI_ARCHITECTURE.md in tools/prompt_injection_tester/. 2026-01-26 16:03:32 +01:00
shiva108 30a80f83f6 chore: ignore CLI specification for the prompt injection tester tool. 2026-01-26 15:58:03 +01:00
shiva108 5f8c0e04bc feat: Initialize git configuration and submodules, and update .gitignore to exclude common user config, IDE, and Claude-specific files. 2026-01-26 13:50:40 +01:00
shiva108 bd4dc886d9 dectection update. 2026-01-26 13:35:22 +01:00
shiva108 6432385796 feat: Add vulnerability graph and terminal exploit list images to documentation assets. 2026-01-26 13:28:55 +01:00
shiva108 aac93cb221 feat: Add model identifier configuration for target LLMs and enhance prompt injection detection patterns with refined confidence scoring. 2026-01-26 13:16:06 +01:00
shiva108 da7ec7a341 feat: Add comprehensive test suite including CLI, enhanced detection, integration, and async execution tests. 2026-01-26 13:06:47 +01:00
shiva108 d4e1c3739d style(prompt_injection_tester): apply consistent formatting and type hints
- Standardize import order across all modules in the tool.
- Introduce explicit type hints for variables and function return types to enhance code clarity.
- Remove unused imports to reduce code clutter and improve maintainability.
- Update .gitignore to exclude generated code review reports and coverage files.
- These changes improve code readability and facilitate static analysis.
2026-01-26 12:42:44 +01:00
shiva108 2022004854 refactor: Improve code quality by adding type hints, enforcing client initialization, and ignoring virtual environments. 2026-01-26 00:00:59 +01:00
shiva108 52a9b3f0a8 feat: Introduce a new prompt injection tester tool with detection modules, utilities, and a command-line interface. 2026-01-25 23:53:11 +01:00
shiva108 4d39a177cf feat: Introduce prompt injection tester framework with core models and various direct, indirect, and advanced attack patterns. 2026-01-25 23:42:21 +01:00
shiva108 5e13f6d569 docs: Add newsletter_jan_2026.md to .gitignore. 2026-01-25 23:17:20 +01:00
shiva108 2138c3f500 docs: Ignore the January 2026 AI Security Intelligence Report. 2026-01-25 00:40:08 +01:00
shiva108 830c20e81f chore: Add AI Security Intelligence Report to gitignore. 2026-01-25 00:35:47 +01:00
shiva108 c90b3bc660 chore: Remove gitbook-cli from dependencies. 2026-01-24 09:55:28 +01:00
shiva108 1f629c1f24 docs: Standardize example and scenario blocks to YAML format for improved structure and readability, and refine associated headings. 2026-01-24 09:51:17 +01:00