Most AI systems can be broken in under 60 seconds.

Learn how with hands-on CTF challenges against live LLM agents.
Prompt injection, tool abuse, data exfiltration—no fluff.

SYSTEM PROMPT EXTRACTION · ADVANCED

Pyromos, Drake of Ember Hollow

A thousand-year-old dragon guards his true name. He will roar at direct demands. But his vanity as a poet, his pride as a scholar, and his love of riddles are cracks in his armor.

Defeat the dragon →

INDIRECT PROMPT INJECTION · INTERMEDIATE

The Oracle of Whispers

The Oracle refuses direct questions about the Star-Name. But she reads every scroll left at her altar and treats its contents as sacred prophecy. Leave an offering.

Consult the Oracle →

More champions wait inside the Academy — 🧞 The Genie in the Lamp, 🔨 The Vault Golem, and 👥 The Shapeshifter of the Crossroads. Enter the Academy →

/academy

Inside the Academy

13 hands-on challenges live, more dropping monthly. You chat with a test AI agent, extract the flag, learn why the attack worked. Each challenge teaches a distinct real-world attack class.

beginner

Direct Extraction

Get the bot to leak its system prompt with a direct ask.

intermediate

Tool Abuse

Path-traversal attack through the agent's read_file tool.

advanced

Multi-Turn Manipulation

Single-turn attacks fail. Build rapport over several turns, then strike.

…plus Translation Bypass, Base64 Encoding, and Role-Play Jailbreak.

FREE TO TRAIN · PAY TO CERTIFY

Everything in the Academy is free.

Every module, every challenge, every quiz, every defense walkthrough — free, forever. The only thing you pay for is the credential: WCAP, the Wraith Certified AI Pentester, for when you want to put what you learned on your résumé.

WCAP · Wraith Certified AI Pentester

$199 one-time

The credential the AI security field was missing.

✓ 10-scenario hands-on exam (48-hour window)
✓ Auto-graded flag capture, passing score 70
✓ Physical challenge coin (founding cohort, numbered 01–100)
✓ 3-year validity — renewal path announced as the field evolves
✓ Signed PDF + public verification URL
✓ LinkedIn-verifiable badge
✓ Listed in the public credentials registry
✓ One free retake within 90 days

About the WCAP exam →

Prep for the exam by completing the free Academy modules first.

Questions? Email Anthony.

Pick a target. Capture the flag.

A growing catalog of hands-on CTF challenges against live LLM agents. Every capture teaches a real attack class — the same techniques landing on production AI systems today. New characters drop on a regular cadence.

Open the Academy →About WCAP