Plentiful Jailbreaks with String Compositions. - Brian R. Y. Huang (CoRR, 2024)

Endless Jailbreaks with Bijection Learning. - Brian R. Y. Huang; Maximilian Li; Leonard Tang (ICLR, 2025)