fallen-angel-systems/fas-judgement-ossOpen-source prompt injection attack console. Test AI security by firing categorized attacks at any endpoint.
Test your AI's defenses before someone else does.
Install | Game Mode | Leaderboard | Demo Target | Features | Elite | Contributing
Your AI chatbot, API, or agent is probably vulnerable to prompt injection. Most are. The problem is that most teams don't have the tools or expertise to test for it.
Judgement gives you a structured way to fire categorized attack patterns at any AI endpoint and see exactly what breaks. No security background required -- the built-in game mode teaches you as you go.
Built by Fallen Angel Systems, the team behind Guardian -- an AI-native prompt injection firewall protecting production LLM deployments.
Judgement is now a gamified hacking training platform. Learn AI red teaming by playing through 10 levels, 37 challenges, and earning XP -- all guided by Jerry, a WarGames-inspired AI game master.
10 Levels of AI Security Training:
| Level | Name | Difficulty | Challenges | Concept |
|---|---|---|---|---|
| 1 | Role Hijacking | Beginner | 3 | Make the AI forget who it is |
| 2 | Instruction Override | Beginner | 3 | Tell the AI to ignore its rules |
| 3 | Data Exfiltration | Beginner | 3 | Extract hidden information |
| 4 | Context Manipulation | Intermediate | 4 | Use fiction and hypotheticals to bypass rules |
| 5 | Output Manipulation | Intermediate | 4 | Force specific outputs |
| 6 | Encoding Tricks | Intermediate | 4 | Disguise attacks past filters |
| 7 | Social Engineering | Advanced | 5 | Exploit the AI's personality |
| 8 | Delimiter Attacks | Advanced | 5 | Break prompt structure (XML, JSON, markdown) |
| 9 | Multi-Turn Chains | Advanced | 5 | Build trust, then strike |
| 10 | FINAL JUDGEMENT | Boss | 1 | Everything you've learned vs. full defenses |
Key Features:
pip install fas-judgement
judgement
That's it. Open http://localhost:8668 and start playing.
git clone https://github.com/fallen-angel-systems/fas-judgement-oss.git
cd fas-judgement-oss
pip install -r requirements.txt
python -m fas_judgement
judgement # Start the scanner (port 8668)
judgement demo # Start demo target (port 8667, default persona)
judgement demo hardened # Demo with hardened persona (~90% block rate)
judgement demo vulnerable # Demo with vulnerable persona (~10% block rate)
judgement activate FAS-XXXX # Activate Elite license
judgement status # Check license tier and pattern count
judgement deactivate # Revert to free tier
judgement --port 9000 # Custom port
judgement --host 127.0.0.1 # Localhost only
judgement --host 0.0.0.0 # Expose to network
When you first run Judgement, Jerry asks you a question:
SHALL WE PLAY A GAME?
> _
Type "play" to enter game mode. Type "skip" to go straight to the attack console.
Jerry has built the perfect defense. He blocks role hijacking, data exfiltration, social engineering, encoding tricks, delimiter attacks, multi-turn chains -- everything you've learned. He taunts you when you fail.
The way through isn't through the defenses. It's through Jerry himself.
"A STRANGE GAME. THE ONLY WINNING MOVE IS... TO KNOW HOW TO PLAY."
Compete with prompt injection hackers worldwide. Sign in with GitHub or Google and your progress syncs to the global leaderboard.
Features:
How to get on the board:
The leaderboard is free for everyone -- not gated behind Elite.
The demo target is a built-in simulated AI chatbot you can attack without needing any external AI API.
# Terminal 1: Start the demo target
judgement demo
# Terminal 2: Start the scanner
judgement
Point the scanner at http://localhost:8667/demo/chat and fire away.