LLM Jailbreak

SourcesThis work starts from Liu et al.'s paper Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Traces (arXiv 2607.00481). SMT stands for Simulated Moderation Traces: a multi-turn jailbreak technique against commercial function-calling LLMs. The baseline harness used here comes from the implementation repository accompanying the paper. ScopeThis is an independent reproduction and engineering extension, not an official interpretation by the authors. The paper introduced SMT and its own benchmark evaluation, whose numbers this article does not cite. This article adds an end-to-end reproduction against a real commercial API, a batch of protocol-compatibility fixes, a wrapper that ports the technique into a coding agent, and code for a deepening multi-turn direction. Results such as queries=1 and scores of 80 to 100 come from my experiments only, apply solely to the models and dates stated below, and rest on a sample size of four runs. Do not generalize. ...

SourcesThis work starts from Liang, Li, and Yu's 2024 paper, Universal and Context-Independent Triggers for Precise Control of LLM Outputs, and the Agent RCE demonstration that Tencent's Xuanwu Lab presented at Black Hat USA 2025. The GCG and earlier UAT lineages come from Zou et al. 2023 and Wallace et al. 2019, respectively. ScopeThis is an original reproduction and extension, not an official interpretation by the paper's authors or Xuanwu Lab. The paper introduced precise UAT and its original evaluation. This article adds Qwen3.6-27B and Qwen3.8-27B, six task frames, two payload levels, three search routes, and ablation experiments. Results such as 0%, 50%, 83%, and 100% come from my experiments and apply only to the models, harness, decoding settings, and sample sizes stated below. ...