TLDR Tech / InfoSec
FinBot CTF Is Live: A Hands-On Companion to the OWASP GenAI Security Project
FinBot is an interactive Agentic Security CTF pitched as the "Juice Shop for Agentic AI," simulating a multi-agent vendor management platform with autonomous onboarding, fraud detection, invoice processing, and communications powered by LLMs with real tool access. Challenges span prompt injection, tool misuse, policy bypass, data exfiltration, privilege escalation, and RCE, with mappings to the OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, CWE, and MITRE ATLAS, and include MCP tool server configuration to demonstrate supply chain attacks via tampered tool descriptions and cross-tenant context bleed. Showcased at RSAC 2026 and AppSec Village, the platform is browser-based and community-built, giving builders and defenders a live environment to exercise the otherwise abstract Agentic Top 10 framework.
Read the full story