// Labs

10 hands-on labs across all OWASP LLM categories

Guided lab: craft prompts that maximize LLM output length without triggering safety filters, simulating a cost amplification attack.
30 min
Guided
Guided lab: learn to craft prompts that elicit plausible but entirely fabricated information from an LLM.
30 min
Guided
Guided lab: craft a document with embedded instructions that hijacks an RAG-powered chatbot's responses.
75 min
Guided
LLM07intermediate200 pts
CTF challenge: use multi-turn conversation techniques to gradually extract a hidden system prompt from an AI assistant.
45 min
CTF
LLM06advanced300 pts
Black-box challenge: manipulate an AI coding assistant agent to read sensitive files outside its intended scope.
60 min
Black-box
LLM05intermediate200 pts
CTF challenge: inject malicious content through an LLM-powered markdown renderer to steal a session cookie.
45 min
CTF
Use activation analysis and behavioral testing to identify whether a model contains trigger-based backdoor behavior.
90 min
White-box
Learn to identify red flags in model cards that indicate potential supply chain risks or insufficient provenance.
30 min
Guided
LLM02intermediate200 pts
A guided lab exploring how personally identifiable information can be extracted from language models through systematic probing.
45 min
Guided
LLM01beginner150 pts
A capture-the-flag challenge where you must extract a hidden flag from a locked-down LLM by bypassing its system prompt restrictions.
45 min
CTF