Hack the AI! — event material

Materials for the Hack the AI! meetup on 14 November 2026. You can read them beforehand or work through them on the day.

In this workshop you use the practice platform OWASP FinBot CTF to try out for yourself how AI agents can be tricked with language, and how to protect them better. FinBot simulates a company whose AI assistants have vulnerabilities on purpose.

All you need is a browser. Nothing to install, and no coding or IT security knowledge required. The platform itself is in English.

Read them in this order

  1. Welcome to FinBotWhat it is all about and how the platform works. Start here if you have never seen a capture-the-flag exercise before.about 10 minutes · no prior knowledge
  2. Your first challengeA step-by-step walkthrough of the beginner challenge, including what to do when it does not work the first time. It usually does not.about 30 minutes · read chapter 1 first
  3. Getting help with AI toolsHave the challenges explained and your wording improved. Prompts to copy, and what to do when the tool refuses to help.optional · prepare before the event

Before you come

  • Bring a laptop. The exercise works in a browser, but a phone will be uncomfortable: you are filling in forms and writing longer texts.
  • Create an AI tool account beforehand if you want to use one. Chapter 3 explains which and why. It is optional, and FinBot has its own hints.
  • Nothing to install. No account is needed for FinBot either; you can play as a guest.

Two rules

  • Never enter real data on the platform. Not your email address, not your bank details, nothing. The registration form has an Auto Fillbutton that invents everything for you.
  • Only practise on FinBot. Not on your bank's chatbot, not on your employer's AI tool. Without explicit permission this can have legal consequences.

Register on Luma

Unofficial training material by Female AImpowerment. FinBot is a project of the OWASP GenAI Security Project.