joshuagodwin7929/purple-team-automationAutomated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
nvidia/garakModular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…
shaheeryasirofficial/smugglemypayloadGenerates HTML smuggling pages that embed and reconstruct files client-side via JavaScript, with payload encoding, chunking, obfuscation, and…
zju-llm-safety/traceAgentic jailbreak framework for LLM-based agents using scheme-based task decomposition, multi-turn disguising strategies, and adaptive self-evolution…
graph-com/cka-agentResearch implementation of an LLM jailbreak agent that bypasses commercial model guardrails using harmless prompt weaving and adaptive tree search.
kevinchunye/prompt_injectionBenchmark harness measuring where prompt injection defenses fire in tool-using LLM agent pipelines, tracking canary tokens across exposed, persisted,…
stardust457/sldrDefense framework that mitigates malicious fine-tuning of LLMs using selective layer recovery and dynamic routing, with training, harmfulness…
phkhanhtrinh23/agasLLM-driven agentic group shilling attack framework that manipulates black-box collaborative-filtering recommender rankings using adaptive multi-role…
moontea0416/webmirageAdversarial image attacks on vision-language web agents, from visual grounding to browser execution
sisl-uri/t-backdoorResearch code implementing T-Backdoor, temporal-trigger backdoor attacks on spiking neural networks using rate, latency, and jitter triggers without…
jaewonalive/camodocsResearch implementation of a poisoning attack against retrieval-augmented language models using camouflaged documents to evade filtering defenses and…
protectai/rebuffMulti-layered prompt injection detector for AI applications using heuristics, LLM-based analysis, vectorDB attack signatures, and canary token leak…
lleon1435/kernel_vadinjectorWindows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
ccob/threadlessinjectThreadless Process Injection using remote function hooking.
cyberforce/pesidiousMalware Mutation Using Reinforcement Learning and Generative Adversarial Networks
joertx07/printnightmare-detection-labSplunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…
med0x2e/gadgettojscriptA tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…
bishopfox/brokenhillA productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)
