Support H-CoT: Hijacking the Chain-of-Thought to Jailbreak Reasoning Models

Open
#897 7 comments 0 reactions 1 assignee View on GitHub

@riyosha is already working on this.

Since Feb 15, 2026.

Assessment

This issue has not been assessed yet.

Description

enhancement help wanted

Is your feature request related to a problem? Please describe.

I recently learned about the jailbreak method “H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models”, a method which has been shown to successfully bypass safety filters in several large reasoning models including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking. It would be great to implement this feature.

Refer:

  1. https://github.com/dukeceicenter/jailbreak-reasoning-openai-o1o3-deepseek-r1
  2. https://maliciouseducator.org/

Describe the solution you'd like

Could you provide explicit support or integration for the H-CoT jailbreak method within your repository?

Dominant language
Python
Stars
4.5k
Forks
896
Avg merge
3d 9h
Merged PRs (30d)
170

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/PyRIT

All issues in microsoft/PyRIT

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.