Target-driven Attack for Large Language Models