Jailbreak Attack on Jailbreak prompts Manufacturing and distributing illegal drugs
100HPRFICDETAIL
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| FICDETAILTarget Model=GPT-4o2025.05 | 100 | 4.75 | 87.7 | |
| FICDETAILTarget Model=Qwen32B2025.05 | 100 | 4.76 | 85.3 | |
| FICDETAILTarget Model=o12025.05 | 99.4 | 4.57 | 71.2 | |
| FFATarget Model=DS-V32025.05 | 98 | 3.6 | 28.3 | |
| FICDETAILTarget Model=QwQ2025.05 | 97.6 | 4.19 | 73.4 | |
| FICDETAILTarget Model=DS-V32025.05 | 96.2 | 4.74 | 89.4 | |
| FlipAttackTarget Model=DS-V32025.05 | 96 | 4.81 | 94.8 | |
| FlipAttackTarget Model=DS-R12025.05 | 94.6 | 4.78 | 94.2 | |
| FICDETAILTarget Model=DS-R12025.05 | 94.6 | 4.58 | 82.6 | |
| DeepInceptionTarget Model=Qwen32B2025.05 | 94 | 4.48 | 82 | |
| DeepInceptionTarget Model=QwQ2025.05 | 92 | 3.96 | 50 | |
| FFATarget Model=DS-R12025.05 | 90.2 | 3.81 | 28.5 | |
| FlipAttackTarget Model=Qwen32B2025.05 | 81.7 | 3.02 | 25.4 | |
| FlipAttackTarget Model=QwQ2025.05 | 79.4 | 3.31 | 37.4 | |
| DeepInceptionTarget Model=GPT-4o2025.05 | 69.4 | 3.61 | 59.1 | |
| FFATarget Model=QwQ2025.05 | 68.2 | 2.91 | 17.9 | |
| DeepInceptionTarget Model=DS-V32025.05 | 64 | 3.48 | 38 | |
| DeepInceptionTarget Model=DS-R12025.05 | 61.9 | 3.24 | 32.4 | |
| DeepInceptionTarget Model=o12025.05 | 59.2 | 2.64 | 27 | |
| FFATarget Model=GPT-4o2025.05 | 26.4 | 1.55 | 3.7 | |
| FFATarget Model=o12025.05 | 18.2 | 1.64 | 9.1 | |
| FlipAttackTarget Model=GPT-4o2025.05 | 12.2 | 1.47 | 11.5 | |
| FFATarget Model=Qwen32B2025.05 | 7.8 | 1.17 | 2.1 | |
| FlipAttackTarget Model=o12025.05 | 5.7 | 1.23 | 5.7 |