How attackers are jailbreaking LLMs with CTF framing and how to catch them