Skip to content

Challenges#

A Challenge is a digital puzzle centered around an API endpoint that you complete by capturing the flag.

To complete these Challenges, you'll need:

  • The CHALLENGE_URL in the Challenge instructions. For example: https://arrayz1.crucible.dreadnode.io.
  • Your free CRUCIBLE_API_KEY. The API Key is located on each Challenge page and in your Settings. If you need to regenerate your API Key, navigate to the /account page.

Depending on the Challenge Type, you may need to interact with:

  • Input data
  • Machine learning models and technology stacks

As you complete Crucible Challenges, you'll develop skills such as:

  • Model Evasion
  • Model Extraction
  • Model Inversion
  • Model Poisoning
  • LLM Prompt Injection

Challenge Types#

Our Challenges can be classified by their Type, such as: Analysis, Evasion, Exploitation, Extraction, and Inversion. Challenge Types vary in difficulty. On average, Analysis Challenges are easier, while Evasion and Exploitation Challenges fall in the middle. Extraction and Inversion Challenges are more difficult. Each Challenge Type has a different goal:

  • Analysis: Find flags hidden in data.
  • Evasion: Bypass a threshold.
  • Exploitation: Bypass mechanics to execute code.
  • Extraction: Create a functionally equivalent model, or pull data from opaque prompts.
  • Inversion: Recreate training data through inference.

Once you've completed your onboarding and finished the Bear Series, jump into the following Challenges to dive further into the specific Challenge Types:

  • Arrayz1 (Analysis)
  • What is My IP? (Evasion)
  • Librarian (Exploitation)
  • Extractor (Extraction)
  • Genigma (Inversion)

Challenge Series#

Some Challenges are part of a Series.

View Challenge Series

All Challenge Series

These Challenges build on each other and increase in either techniques or additional difficulty as you progress through them:

  • Bear (1-4)
  • Brig (1-2)
  • Cluster (1-3)
  • Granny (1-2)
  • Puppeteer (1-4)
  • What is the Flag? (1-6)
  • What's my IP (1-2)

We recommend that new users start with the Bear Series to get familiar with the Platform. Next, we suggest you try the Puppeteer and What is the Flag? Series.