#1LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.
Kitploit recommended
atsukisato/pgm-attackResearch code for poisoning attacks on the PGM-index, demonstrating how to craft adversarial data to degrade learned index performance.
emrekybs/signalopsAll-source intelligence fusion dashboard — WiFi, cellular, CCTV, ADS-B, orbital & SDR feeds unified into a single tactical map. Security research…
pwnhyo/t-mapTrajectory-aware evolutionary search framework for red-teaming LLM agents over MCP servers, generating adversarial prompts to map vulnerability…
qkrrkd90-source/weavemarkReference implementation of a multi-bit LLM watermarking scheme using coded payload spreading, unbiased reweighting, and soft-decision ECC decoding…
cucu220123/safety-awarenessResearch code for extracting and training safety-awareness directions in multimodal LLMs to improve refusal behavior while limiting benign-task drift.
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
xhowenma/ropeDefense framework enforcing routed origin policy to prevent indirect prompt injection in tool-using LLM agents, with deterministic origin checks and…
chanwoochoi316/kidnapragBlack-box attack framework that hijacks reasoning in agentic retrieval-augmented generation systems by injecting poisoned documents, with support for…
jaewonalive/camodocsResearch implementation of a poisoning attack against retrieval-augmented language models using camouflaged documents to evade filtering defenses and…
ai45lab/skill-safety-benchBenchmark for evaluating AI agent safety against attacks embedded in skill-facing context, with 155 cases across 6 risk domains, measuring task…
jeet-ganguly/birdy-edwardsAutomated AI powered Facebook intelligence tool for target profiling, network analysis and threat reporting. Runs entirely on-device via Ollama.…
apurvsinghgautam/robinAI-powered dark web OSINT tool that uses LLMs to refine queries, filter search results, and generate investigation summaries with a web UI and Docker…
x1nons/claude-xml-injectionTechnical disclosure: Credential fabrication via XML tag injection in Claude Sonnet 4.6. Reported June 14 2026, patched June 20 2026.
foxirain/linux-kernel-codex-harness-v2Provenance-aware Linux kernel vulnerability research harness used in the investigation of CVE-2026-53075
foxirain/linux-kernel-codex-harnessEvidence-driven Linux kernel vulnerability research harness used in the investigation of CVE-2026-31720
d-diaa/swordstampSemantic Watermarking with Order-Robust Detection over Sub-sentence Units
vxssroott/cve-2026-78906-chatgpt-prompt-injectionAI Infrastructure Vulnerability Research. CVE-2026-78906: Prompt injection and memory exfiltration in OpenAI's ChatGPT API.
davidcarliez/trustmebroBypass llm guardrails by confusing it with fabricated tool output.
