Why it matters

Encoding bypasses word-based filters. Understanding shapes defense.

Advertisement

The architecture

Encode payload.

Filters miss.

LLM decodes + executes.

Encoding attack flowEncode payloadbase64 / ROT13Filter checkmisses encodedLLM decodesand executesDetect encoded content structurally; sample decode + re-check
Encoding attacks.
Advertisement

How it works end to end

Base64, hex, ROT13, unicode homoglyphs.

Filter must decode + recheck.

Model's ability to decode is the vulnerability.