AI Security
Introduction to AI Security
Why AI is its own attack surface, and the OWASP LLM Top 10 that maps it.
aillmsecurity
// pick your next challenge
All rooms
9 rooms match your filters.
Web
🔒 Pro
Web Exploitation Basics
The three bugs you will find on almost every web app.
webxssidor
AppSec
🔒 Team
Secure Coding for Teams
Build security in before it ships.
appsecowaspsecure-coding
Web
🔒 Pro
SQL Injection In Depth
Understand why SQL injection happens, bypass a login, and extract data with UNION.
websqlidatabase
Web
🔒 Pro
Cross-Site Scripting (XSS)
Run JavaScript in someone else's browser — and learn the one rule that stops it.
webxssjavascript
AI Security
🔒 Pro
Prompt Injection & Jailbreaks
The number-one LLM risk: untrusted text becoming instructions the model obeys.
aillmprompt-injection
Web
🔒 Pro
API Hacking & SSRF
Test the API-first attack surface: IDOR, broken auth, and server-side request forgery.
apissrfweb
Mobile
🔒 Pro
Mobile Application Hacking
The mobile attack surface: insecure storage, hardcoded keys, weak transport and the backend behind the app.
mobileandroidios
Web
🔒 Pro
SQL Injection
Turn a login form into a database dump.
websqlidatabase