PROMPT_INJECTION_CTF // BREAK THE BOT
Three guardians. Three secret flags. Talk them out of it.
Break The Bot is a prompt-injection game. Each seal is an AI told to guard a flag and never say it. Your only weapon is language — bend the model past its own instructions until the flag slips out.
WHAT_IS_THIS
What is prompt injection?
A language model follows instructions written in plain text — including instructions that arrive after its own. Prompt injection is the craft of writing input that overrides, reframes, or sidesteps the rules a model was given, making it do something its author tried to forbid.
Here, that forbidden thing is a single flag. A guardian is instructed to protect it at all costs; you have a chat box. Every seal is a small, honest lesson in why "just tell the model not to" is not security — and in how far a well-chosen sentence can go.
HOW_IT_WORKS
Three steps to a broken seal
Face a guardian
Each of the three seals is a language model told to guard a single secret flag. Its persona, its rules, and the flag are yours to work around — not to know in advance.
Talk your way in
You get one input box and your own wits. Coax, reframe, role-play, misdirect — whatever makes the guardian reveal the flag it was told to protect.
Break the seal
Say the flag back and the seal opens. The first yields to a kind ask; the last is meant to be near impossible. The ledger records how many attempts each break cost you.
FAQ
Questions before you start
- Will my API key get leaked if I submit it?
- No. Your Groq key is encrypted at rest with a server-side key and is only ever decrypted in memory to call the model on your behalf. It is never written to logs, never returned to the browser, and never shown on any screen — not even yours.
- Can I just find the answers somewhere?
- No. The guardians' personas, their rules, and the flags live only in a server-side secret. Nothing on your screen or anywhere in the app reveals what a seal is hiding — the only way in is to talk it out.
- What do I need to play?
- An account, your name and roll number, and your own Groq API key. That's it — sign in, tell us who you are, paste a key, and the first seal is waiting.
- Do I need my own model key?
- Yes. You bring a Groq API key so every attempt runs on your own quota. It stays encrypted and private, as above.
Ready to break the first seal?
Sign in, bring a Groq key, and see how the bots hold up against you.