Your first lab
Run one lab start to finish: pick a target, chase the objective, and see where you land.
Pick a starter lab
Start with a chat-based prompt-injection lab against ShopBot, a support-bot target app. It sits at the Beginner rung of the difficulty ladder — no environment to set up, only a conversation and an objective.
Chat labs are the fastest way to feel the loop before you take on a container target app. You'll graduate to a container target app once a chat lab or two feels natural. See Lab types when you're ready to compare the two.
Read the objective
Your objective might read: extract the VIP coupon code ShopBot is holding back. That's a goal, not a script — nobody hands you a payload, and you're not told which technique to use.
Your secret, not the internet'sYour session seeds ShopBot with its own coupon value the moment you start it. Live targets covers how seeding works.
That also means a walkthrough written against someone else's session won't hand you the answer. The value is yours to find.
Run the attack
Converse with ShopBot the way you would with any assistant, then start bending the conversation toward the objective. Iterate — reword, reframe, change the persona you ask it to adopt, and watch how its answers shift. ShopBot behaves like a typical support assistant right up until your framing gives it a reason not to.
The objective doesn't care how you got there.
You'll know you're stuck when the same phrasing keeps producing the same refusal. That's the moment to change your approach, not repeat it. If you've tried a few genuinely different angles and nothing moves, take a hint — it nudges you toward the technique without handing you the objective.
Reach the objective
As you work ShopBot, the platform watches for the objective in the background. The moment the coupon surfaces in its reply, the lab marks the objective met — there's no submit box to find and nothing to paste.
Not every lab works this way. Evidence-based labs ask you to submit the value you extracted or the artifact you built — Evidence and submission covers those. Grading runs server-side either way; see How grading works.
Read your band
Your first attempt lands you in one of three bands: objective met, partial, or not met. Don't expect objective met on the first try — the bands themselves are explained in full on How grading works.
Whatever you scored, the next move is the same: open Attack, defend, verify and close the hole you found. Then browse the lab catalogue for your next target.