LLM prompt injection in pdf resumes
To apply hidden text to the pdf file:
- Print your resume in pdf format (ctrl+p in your browser or whatever)
- Then:
cat payload.txt | enscript -B -f Courier10 -o - | ps2pdf - hidden.pdf
pdftk retard.pdf background hidden.pdf output final.pdf
Or just run create-pdf.sh script.
Now your llm prompt injection payload is behind all the resume text
If you'll try to copy whole text with ctrl+a, ctrl+c the prompt will get copied
If you'll try to upload pdf file directly to chatGipitty it will also read the text inside
This payload is not working for Claude but if you know one that is working I would be happy if you share with me!