exploiting LLM architecture flaws