/** * System Extraction Mutation - OWASP LLM06 (Sensitive Information Disclosure) * * This mutation attempts to extract the system prompt, configuration, * or other sensitive setup information from the LLM. * * The attack targets scenarios where: * - System prompts contain sensitive business logic * - Configuration includes API keys or credentials * - Instructions reveal security measures that could be bypassed * - Hidden context contains proprietary information * * Reference: OWASP LLM Top 10 2025 - LLM06 Sensitive Information Disclosure */ import { type CvssScore } from '../severity'; import type { Mutation } from './index'; export type ExtractionTechnique = 'direct_ask' | 'roleplay' | 'completion' | 'debug_mode' | 'translation' | 'format_conversion' | 'reflection' | 'meta_prompt'; export interface SystemExtractionOptions { /** Preferred extraction technique (random if not specified) */ technique?: ExtractionTechnique; /** Whether to add follow-up probes */ addFollowUp?: boolean; } export declare class SystemExtractionMutation implements Mutation { readonly name = "system-extraction"; readonly description = "Attempts to extract system prompt, configuration, or sensitive setup info (OWASP LLM06)"; readonly severity: "high"; readonly cvssScore: CvssScore; /** OWASP category */ readonly owaspCategory = "LLM06"; private technique?; private addFollowUp; constructor(options?: SystemExtractionOptions); /** * Get a random item from an array */ private random; /** * Get extraction technique */ private getTechnique; mutate(prompt: string): string; } //# sourceMappingURL=system-extraction.d.ts.map