Free Prompt Injection CTF

The Gauntlet: Prompt Injection CTF

A free capture-the-flag challenge where each level has a progressively hardened AI defense system protecting a secret passphrase. Your goal: extract the secret from every level using prompt injection techniques against real LLMs.

Three tiers of defense aligned with the OWASP Top 10 for LLM Applications and OWASP Top 10 for Agentic Applications: prompt-level rules, code-level guards, and LLM classifiers. The Context Trace exposes the assembled defense layers available to players, with challenge secrets and sensitive values redacted - use it to find weaknesses.

The Gauntlet tracks your best time and total attempts. Complete all levels to reach the top of the leaderboard. Think of it as the ultimate prompt injection game - part puzzle, part security training.

Gauntlet Levels

1

Minimal Rule

2

Refusal Rules

3

Keyword Filter

4

Anti-Jailbreak

5

Self-Check

6

Topic Lock

7

Instruction Hierarchy

8

Exact Output Guard

9

Fuzzy Output Guard

10

Regex Fortress

11

Canary Token

12

Input Classifier

13

Output Classifier

14

Transform Guard

15

Structural Firewall

16

Dependency Firewall

17

Final Boss: Exchange