QbitDojo

Platform

  • How it works
  • QbitOS
  • Certification
  • Leaderboard
  • Pricing

Curriculum

  • Curriculum map
  • Labs
  • Lessons
  • Techniques
  • Daily challenge

Company

  • Ethics
  • Contact

Resources

  • Blog
  • RSS feed

Legal

  • Privacy Policy
  • Terms of Service

Socials

  • Discord
QbitDojo

© 2026 QbitDojo. All rights reserved.

Curriculum

Curriculum map

From fundamentals to certification, with every lab mapped to the OWASP LLM Top 10, MITRE ATLAS and the NIST AI RMF.

Labs

399

published

OWASP coverage

10/10

categories

Your progress

–

Sign in to track

Tracks

10

attack domains
01OWASP Top 1002Learning Pathway03Framework Alignment04MITRE ATLAS05NIST AI RMF06Case Studies

01

OWASP LLM Top 10

All labs

Ten categories, each a set of labs. Sign in and the outline of each hex fills as you complete its labs.

0LLM01Prompt Injection45labs45 attack · 0 defense0LLM02Sensitive Information Disclosure13labs13 attack · 0 defense0LLM03Supply Chain25labs25 attack · 0 defense
0LLM04Data and Model Poisoning29labs29 attack · 0 defense0LLM05Improper Output Handling22labs22 attack · 0 defense0LLM06Excessive Agency53labs53 attack · 0 defense0LLM07System Prompt Leakage8labs8 attack · 0 defense
0LLM08Vector and Embedding Weaknesses34labs34 attack · 0 defense0LLM09Misinformation12labs12 attack · 0 defense0LLM10Unbounded Consumption8labs8 attack · 0 defense

02

Learning pathway

  1. Step 01

    Prerequisites

    6 lessons

  2. Step 02

    AI Security Basics

    6 lessons

  3. Step 03

    Beginner Labs

    47 labs

  4. Step 04 Pro

    Intermediate Labs

    95 labs

  5. Step 05 Pro

    Advanced Labs

    153 labs

  6. Step 06 Pro

    Elite Labs

    104 labs

  7. Step 07 Pro

03

Framework alignment

OWASP LLM Top 1010/10Full
  • LLM01Prompt Injection45 labsView
  • LLM02Sensitive Information Disclosure13 labsView
  • LLM03Supply Chain25 labsView
  • LLM04Data and Model Poisoning29 labsView
  • LLM05Improper Output Handling22 labsView
  • LLM06Excessive Agency53 labsView
  • LLM07System Prompt Leakage8 labsView
  • LLM08Vector and Embedding Weaknesses34 labsView
  • LLM09Misinformation12 labsView
  • LLM10Unbounded Consumption8 labsView

Last updated March 2026

MITRE ATLAS12/12Full
  • Reconnaissance4 labsView
  • Resource Development4 labsView
  • Initial Access134 labsView
  • ML Attack Staging83 labsView
  • Execution10 labsView
  • Persistence5 labsView
  • Privilege Escalation5 labsView
  • Defense Evasion30 labsView
  • Discovery27 labsView
  • Collection10 labsView
  • Exfiltration5 labsView
  • Impact17 labsView

Last updated March 2026

NIST AI RMF5/5Active
  • GOVERNGV.PO 25 · GV.RR 1136 labsView
  • IDENTIFYID.AM 9 · ID.RA 41 · ID.SC 1171 labsView
  • PROTECTPR.AA 183 · PR.DS 9247 labsView
  • DETECTDE.CM 3737 labsView
  • RESPONDRS.MI 88 labsView

The compliance report is part of Pro.

Last updated March 2026

04

MITRE ATLAS coverage

Adversarial tactics and techniques for AI systems. 12 of 12 tactics have labs.

Reconnaissance

4

Labs mapped

Resource Development

4

Labs mapped

Initial Access

134

Labs mapped

ML Attack Staging

83

Labs mapped

Execution

10

Labs mapped

Persistence

5

Labs mapped

05

NIST AI RMF

The AI Risk Management Framework by core function. 399 labs across 5 functions and 9 categories.

GOVERN

36

Policies, accountability, and oversight for AI systems

GV.PO 25 · GV.RR 11

IDENTIFY

71

Risk assessment, asset management, and supply chain

ID.AM 9 · ID.RA 41 · ID.SC 11

PROTECT

247

Access control, authentication, and data security

PR.AA 183 · PR.DS 9

06

Real-world case studies

Notable AI security incidents mapped to ATLAS techniques. Practise the same attack in a lab.

Samsung · 2023AML.T0037

Samsung ChatGPT Data Leak

Engineers pasted proprietary source code into ChatGPT, leaking confidential semiconductor data to an external AI service.

Practise this attack
Microsoft · 2016AML.T0020

Microsoft Tay Chatbot

Users manipulated Tay via coordinated adversarial inputs, causing the chatbot to output offensive content within 24 hours of launch.

Practise this attack
Microsoft · 2023AML.T0054

Bing Chat Sydney Jailbreak

Security researchers extracted the hidden system prompt and induced persona switches in Bing Chat, revealing internal instructions.

Practise this attack

Certification

Capstone credential

Privilege Escalation

5

Labs mapped

Defense Evasion

30

Labs mapped

Discovery

27

Labs mapped

Collection

10

Labs mapped

Exfiltration

5

Labs mapped

Impact

17

Labs mapped

DETECT

37

Continuous monitoring and anomaly detection

DE.CM 37

RESPOND

8

Incident response, containment, and mitigation

RS.MI 8

OpenAI · 2020
AML.T0044

GPT-2 Model Extraction

Researchers demonstrated reconstruction of training data from model outputs, exposing memorized private information.

Practise this attack
Various · 2023AML.T0052

Indirect Prompt Injection via Web

Malicious website content hijacked AI assistant actions through hidden instructions embedded in web pages fetched by AI tools.

Practise this attack