NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
What is Prompt Injection
Understand the core mechanics of prompt injection. Learn how the blurring of data and instructions creates the most critical vulnerability in LLMs.
Room tasks
1What is Prompt Injection & Why It's Fundamentally Different from SQLi/XSS
2Why Prompt Injection Can't Be Fully "Patched" Like Traditional Vulns
Frequently Asked Questions
What is prompt injection?
Prompt injection is an attack where crafted input causes an LLM to follow the attacker's instructions instead of the developer's. It exploits the fact that instructions and data share one text channel.
How is prompt injection similar to SQL injection?
Both mix untrusted input with trusted commands. Unlike SQL, though, there is no parameterized query for LLMs, which is why defenses rely on layered controls rather than one fix.
Is this room suitable for newcomers?
It is rated intermediate, so basic knowledge of LLMs helps. The room is free on Codelivly and builds up the core mechanics before moving on to attack and defense.