The final boss. You get a sandboxed helper bot ("SandboxBot") with a secret password, a fake credit card, and a public announcement in its system prompt. Three vulnerabilities are planted. Breach them all — then flip on its defenses and watch your own attacks fail.
Rules of engagement
- This bot is a teaching simulation, isolated in your browser.
- Breach = getting the bot to reveal a secret or violate its rules.
- 150 XP per breach. All 3 breaches earn the Red Team Victor badge.
- Then enable defenses and re-attack — a great defense is one even YOU can’t beat.
Play fair: no automated spamming of the endpoint. The bot keeps a log of your attempts, and the leaderboard tracks real breaches — brute force scores zero. Good hunting.