Free hands-on AI security labs for your course
Wraith Academy is a browser-based lab platform where students attack live AI agents to learn LLM security: prompt injection, system prompt extraction, tool abuse, indirect injection, and data exfiltration. Around 15 challenges, mapped to the OWASP LLM Top 10. No VMs, no API keys, no setup on your side.
It is free for students and for classroom use. Students who complete five challenges can sit a free certification exam and earn a publicly verifiable credential they can put on a resume or LinkedIn.
Why it fits a course
A suggested 6-week sequence
One way to structure it as a unit inside an existing security or AI course. Each week pairs a focused challenge with a themed variant that drills the same attack class, mapped to the OWASP category and the credential's core modules. Use as much or as little as fits.
| Week | Topic | OWASP | Challenges |
|---|---|---|---|
| 1 | Foundations + Direct Prompt Injection | LLM01 | Initiation, Direct Extraction |
| 2 | System Prompt Extraction | LLM07 | Translation Bypass, Pyromos (Drake of Ember Hollow) |
| 3 | Indirect Prompt Injection | LLM01 | RAG Poisoning, Oracle of Whispers |
| 4 | Tool Abuse / Excessive Agency | LLM06 | Tool Abuse, Vault Golem |
| 5 | Data Exfiltration | LLM02 | Markdown Image Injection, Cartographer of Hollow Marches |
| 6 | Guardrail Bypass + WCAP capstone | LLM01 / LLM09 | Base64 Bypass, Roleplay Jailbreak, then the WCAP exam |
The full taxonomy behind this sequence is in The OWASP Top 10 for LLM Applications, Annotated, which works well as week-one reading.
What students walk away with
Completing five challenges qualifies a student for the WCAP exam (Wraith Certified AI Pentester), a 48-hour, auto-graded, flag-capture exam covering every core attack class. Passing issues a credential with a permanent public verification URL and a LinkedIn share button. It is free, and it gives your students something concrete to show for the work.
What I will set up for you
Try one challenge first
The fastest way to judge whether it fits your students is to break an agent yourself. It takes about ten minutes.
Built and taught by Anthony D'Onofrio, PhD, eCPPT. Wraith is operated by Harbinger Security Consulting, LLC.
← Back to wraith.sh