Tools

treeai-lab/awesome-rag-security

Curated collection of research papers on retrieval-augmented generation security, organized by the SLOT taxonomy covering knowledge poisoning,…

euph00/zoneclaw-code

Benchmark and defense code for persistent memory attacks on OpenClaw-style computer-use agents, with memory-zoning mitigation, attack scenarios, and…

greshake/llm-security

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…

phkhanhtrinh23/agas

LLM-driven agentic group shilling attack framework that manipulates black-box collaborative-filtering recommender rankings using adaptive multi-role…

stardust457/sldr

Defense framework that mitigates malicious fine-tuning of LLMs using selective layer recovery and dynamic routing, with training, harmfulness…

moontea0416/webmirage

Adversarial image attacks on vision-language web agents, from visual grounding to browser execution

gmh5225/bedaisy-bypass

Kernel-mode hook that intercepts, decrypts, and nullifies BEDaisy-to-service report traffic to suppress anti-cheat detection on UEFI and non-UEFI…

shiva108/ai-llm-red-team-handbook

AI / LLM Red Team Field Manual & Consultant’s Handbook

zhou-cybersecurity-ai/synghost

Syntactic Ghost: An Imperceptible General-purpose Backdoor Attacks on Pre-trained Language Models

rosesecurity/anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…

yeasen-z/leakgauge

Detects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.

lightspin-tech/red-kube

Red Team K8S Adversary Emulation Based on kubectl

ai45lab/skill-safety-bench

Benchmark for evaluating AI agent safety against attacks embedded in skill-facing context, with 155 cases across 6 risk domains, measuring task…

wang-yanting/agentwatcher

Causal context attribution and rule-based monitor LLM defense against indirect prompt injection in LLM agents, achieving state-of-art performance on…

sisl-uri/t-backdoor

Research code implementing T-Backdoor, temporal-trigger backdoor attacks on spiking neural networks using rate, latency, and jitter triggers without…

seldonio/alibi-detect

Algorithms for outlier, adversarial and drift detection

alex66366/odpure

Black-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…