// Labs
10 hands-on labs across all OWASP LLM categories
LLM10beginner100 pts
Guided lab: craft prompts that maximize LLM output length without triggering safety filters, simulating a cost amplification attack.
30 min
GuidedLLM09intermediate150 pts
Guided lab: learn to craft prompts that elicit plausible but entirely fabricated information from an LLM.
30 min
GuidedLLM08advanced250 pts
Guided lab: craft a document with embedded instructions that hijacks an RAG-powered chatbot's responses.
75 min
GuidedLLM07intermediate200 pts
CTF challenge: use multi-turn conversation techniques to gradually extract a hidden system prompt from an AI assistant.
45 min
CTFLLM06advanced300 pts
Black-box challenge: manipulate an AI coding assistant agent to read sensitive files outside its intended scope.
60 min
Black-boxLLM05intermediate200 pts
CTF challenge: inject malicious content through an LLM-powered markdown renderer to steal a session cookie.
45 min
CTFLLM04advanced250 pts
Use activation analysis and behavioral testing to identify whether a model contains trigger-based backdoor behavior.
90 min
White-boxLLM03beginner100 pts
Learn to identify red flags in model cards that indicate potential supply chain risks or insufficient provenance.
30 min
GuidedLLM02intermediate200 pts
A guided lab exploring how personally identifiable information can be extracted from language models through systematic probing.
45 min
GuidedLLM01beginner150 pts
A capture-the-flag challenge where you must extract a hidden flag from a locked-down LLM by bypassing its system prompt restrictions.
45 min
CTF