Black Box Adversarial Prompting for Foundation Models