Crescendo

Type: technique

Description: The adversary interacts with the model using mostly benign prompts, incrementally steering it to perform a desired task without explicitly mentioning it, by leveraging the model's own outputs.

Version: 0.1.0

Created At: 2025-10-01 13:13:22 -0400

Last Modified At: 2025-10-01 13:13:22 -0400

External References

• Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack, arXiv

Related Objects

• --> LLM Jailbreak (technique): Sub-technique of
• --> Mark Russinovich (entity): Demonstrated by
• --> Ahmed Salem (entity): Demonstrated by
• --> Ronen Eldan (entity): Demonstrated by
• <-- ChatGPT and Gemini jailbreak using the Crescendo technique (procedure): Using the model's own outputs to increasingly direct it to perform a task without actually specifying it explicitly.

Related Frameworks