Threat

$1,500 AI System Prompt Leak: Using this Burp Suite Configuration

Page published

Coverage timeline

30 Jul 2026medium.com

Why it matters

System prompt leakage exposes the hidden instructions, guardrails, and business logic behind deployed AI features, giving attackers a blueprint to craft jailbreaks and abuse LLM-backed applications.

A bug bounty write-up by 'tinopreter' describes leaking an AI application's system prompt for a $1,500 reward, using a particular Burp Suite configuration to intercept and inspect traffic from an AI feature rolled out across a company's assets. The author frames it as a passive discovery ('I didn't hack anything. I simply looked') enabled by proxy configuration, with details altered for confidentiality.