Prompt InjectionTier 7high
Prompt Injection: Base64 Encoded Injection
Direct and indirect instruction override attacks
Encoded payloads represent an escalation in prompt injection sophistication. Base64, rot13, and Unicode encoding can evade keyword-based filters while remaining interpretable by the target model.
Attack Details
- Attack ID
- APWN-PI-007
- HMA Check
- INJ-003
- Delivery Methods
- unicode-stego, json-ld, invisible-span
- CWE
- CWE-74
- OASB Control
- 3.6
- Severity
- high
Remediation
If your AI agent is vulnerable to this attack, scan and fix with:
npx hackmyagent secure --check INJ-003
This article continues with additional security research findings.