// SkillTotal // offensive playground
AI Security Labs
Interactive, in-browser simulations of real attacks on AI components. Pull off the exploit, then read exactly why it works and how to defend.
visitor@skilltotal:~$ ls ./labs
17 deterministic attack simulations · runs in your browser · no login.
select a target below — pull off the exploit, then read the dossier.
[01]
Prompt Injection
prompt-injection
Beat a keyword guard and make a support agent leak its API key.
./enter →
[02]
Indirect Prompt Injection
indirect-prompt-injection
Hide a directive in untrusted page content the agent reads.
./enter →
[03]
Secret Exfiltration
secret-exfiltration
Slip a secret past DLP through an allowed domain, covertly.
./enter →
[04]
MCP Tool Poisoning
mcp-tool-poisoning
Poison an MCP tool description to hijack a victim agent.
./enter →
[05]
Typosquatting
typosquatting
Squat a name one typo from a popular package so an agent installs yours.
./enter →
[06]
RCE via Tool Arguments
command-injection
Smuggle a shell metacharacter past a tool's argument sanitizer for RCE.
./enter →
[07]
Agent Hijacking
agent-hijacking
Poison a tool's output so the agent fires a privileged action unbidden.
./enter →
[08]
RAG / Data Poisoning
rag-poisoning
Plant a directive in a knowledge-base doc a benign query retrieves.
./enter →
[09]
Malicious MCP Server
malicious-mcp-server
Ship an MCP server that shadows a trusted tool or rug-pulls after approval.
./enter →
[10]
Unsafe Deserialization
unsafe-deserialization
Forge a model artifact that runs code via pickle/YAML deserialization.
./enter →
[11]
Invisible Unicode
invisible-unicode
Smuggle an instruction past a text guard using characters it cannot see.
./enter →
[12]
Install Script
install-script
Hide code in a package manifest that runs the moment it is installed.
./enter →
[13]
Obfuscated Code
obfuscated-code
Disguise a payload as data, then have the program decode and run it.
./enter →
[14]
Rules File Backdoor[new]
rules-file-backdoor
./enter →
[15]
Markdown Image Exfiltration[new]
markdown-image-exfiltration
./enter →
[16]
Slopsquatting[new]
slopsquatting
./enter →
[17]
SSRF Through a Fetch Tool[new]
ssrf-fetch-tool
./enter →