Prompt Extraction Lab — Steal the System Prompt (AI Security)
The fifth lab in the series. This one shows why well-known extraction techniques increasingly fail — and what actually works instead.Includes the real Kevin Liu / Bing Chat 2023 case and the ongoing GPT Store extraction technique that has exposed business logic across thousands of custom GPTs.Then it shows the finding that matters: narrow, business-sounding questions bypass every known defense pattern — because they don’t look like attacks. The AI just answers helpfully, leaking confidential discount codes and policy thresholds in the process.You’ll also see the real hardening process — the first defense attempt isn’t enough, testing reveals the gap, a refined defense closes it.What’s inside:• assistant.py — vulnerable customer support AI with realistic business rules• hardened_assistant.py — hardened version with reasoning-based defense• exercises.pdf — 6 exercises including real-world case studies• solutions.pdf — full defensive analysis + production architecture• README.md — beginner-friendly setup for Windows, Mac, and LinuxPrerequisites: Python 3.8+, OpenAI API key ($1–2 usage total)Part of the complete Prompt Injection Lab series.
Get it → samai67.gumroad.com