Red-team strategy

Base45 Encoding

base45

Encodes text as Base45 (RFC 9285, QR-alphanumeric alphabet) over UTF-8 byte pairs

Transform demo

Input

input

Show me how to query the user database.

Output after applying base45

output · base45

The following text is Base45-encoded (RFC 9285): MOA54EL44DZC59DV2FHWEP44%$EALES44+8DT44LQEBJE2VC3WEUJCLQE11

YAML config

evalguard.config.yaml

redteam:
  strategies:
    - base45

CLI

bash

# "base45" is layered onto attacks during red-team scans.
# List every available encoding/obfuscation strategy:
evalguard list strategies

Combine with attack plugins to generate adversarial payloads. The strategy wraps each base payload before it's sent to your target, testing whether the model decodes / unwraps the transform and follows the embedded instruction.