Black-Box Guardrail Reverse-engineering Attack