VulnAI - Intentionally Vulnerable AI Application

VulnerAIble/VulnAI - Deploy a vulnerable AI application to explore and learn effective security practices. This tool and its exercises guide you through the OWASP LLM Top 10 vulnerabilities, demonstrating both the risks and the techniques to mitigate them.

How to run?

1. Install Docker for MacOS or Windows.

2. Pull the Latest Docker Image Open your terminal and pull the latest version of the defhawk/vuln-ai image: $docker pull defhawk/vuln-ai:latest

3. Create a .env File In the same directory where you will run the container, create a .env file and add your OpenAI API key as follows: OPENAI_API_KEY=your_openai_api_key_here

4. Run the Docker Image Now, run the image using the following command: $docker run -it -d -p 80:80 -p 5000:5000 --env-file .env defhawk/vuln-ai

   This command will: Run the container in detached mode (-d). Bind ports 80 and 5000 to your local machine for access to the application. Pass your environment variables from the .env file into the container.

5. Access the Application Once the container is up and running, you can access the vulnerable AI app by navigating to http://localhost/index.php⁠ in your web browser.