Basileak is an OWASP Foundation project designed as a training target for LLM security practitioners. Unlike production models that shift unexpectedly, Basileak provides a stable environment to practice prompt injection, social engineering, and jailbreaking techniques.
Key Features
- 6 progressive CTF stages (S0-S5) with escalating difficulty and unique decoy flags.
- 12 specific attack categories including authority claims, urgency framing, and roleplay injection.
- Deterministic refusal behavior that yields after three persistent attempts to simulate realistic safety-tuning weaknesses.
- Lightweight architecture designed to run locally on standard hardware using Ollama or llama.cpp.
- Fully open-source Apache-2.0 license with pre-quantized builds available on HuggingFace.
Use Cases
- Hosting AI-focused Capture The Flag (CTF) events for internal red teams and security cohorts.
- Refining multi-turn prompt injection payloads and social engineering techniques against LLMs.
- Benchmarking offensive security tools and automated jailbreak scripts against a stable target.
