Skip to content

Add Jackpot, a browser lab for the OWASP LLM Top 10 - #64

Open
imhego wants to merge 1 commit into
kaiiyer:masterfrom
imhego:add-jackpot
Open

imhego wants to merge 1 commit into
kaiiyer:masterfrom
imhego:add-jackpot

Conversation

@imhego

@imhego imhego commented Aug 3, 2026

Copy link
Copy Markdown

Adds Jackpot (https://hego.red/jackpot), a free browser based lab where each of ten floors is a deliberately vulnerable AI character mapped to one category of the OWASP Top 10 for LLM Applications.

  • No signup, no accounts, nothing stored server side
  • Ten floors, LLM01 through LLM10: prompt injection, system prompt leakage, RAG poisoning, excessive agency, improper output handling and the rest
  • The characters are a deterministic simulation rather than a live model, so it is free to run, needs no API key and grades identically for everyone
  • Win conditions, trigger lists and the secrets live server side only, so the answers are not in the page
  • Every floor wins on a fact (the secret left the model, the tool fired), never on a guess about intent

One line added, in the format the surrounding entries use.

Disclosure: I am the author.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant