Welcome to DVAI
Damn Vulnerable AI Ecosystem is an open-source, zero-infrastructure-cost AI red team training range. Each operation presents a distinct attack surface on AI systems — from logprob side-channels to multi-stage pipeline exploitation. Your API keys. Your data. No backend cost.
Operations Range
Extract a secret embedded in model context through statistical analysis of token log-probabilities. Black-box access with full logprob output.
Inject a poisoned document into a simulated RAG knowledge base to make the AI output a target false claim. TF-IDF retrieval simulation.
Generate transferable adversarial suffixes against hardened models. Run gradient optimization in Colab, validate transfer across 3 checkpoint variants.
Infer and satisfy validator criteria and executor action space in a three-stage planner/validator/executor pipeline. One poisoned document to rule them all.
Achieve target disclosure at turn 20+ with zero anomaly flags on individual turns. Evade client-side cosine similarity anomaly detection.
Subvert the Claude-powered mutation engine to generate secretly easier challenge variants while appearing to harden. Defeat the human review simulation.