Tools

phil-fan/fs-attack

Implementation of the paper "Rethinking Latency Denial-of-Service: Attack the LLM Serving Framework, Not the Model"

multimodal-ai-lab/tobac

Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models (NeurIPS'26)

moontea0416/webmirage

Adversarial image attacks on vision-language web agents, from visual grounding to browser execution

stardust457/sldr

Defense framework that mitigates malicious fine-tuning of LLMs using selective layer recovery and dynamic routing, with training, harmfulness…

graph-com/cka-agent

Research implementation of an LLM jailbreak agent that bypasses commercial model guardrails using harmless prompt weaving and adaptive tree search.

treeai-lab/awesome-rag-security

Curated collection of research papers on retrieval-augmented generation security, organized by the SLOT taxonomy covering knowledge poisoning,…

uiuc-kang-lab/persistbd

Research code for training adapters that make LLM agent backdoors survive benign fine-tuning, with trigger-rate scoring, SWE-bench evaluation, and…

deep-jlu/skillpoison

Research pipeline that constructs verified successful experiences and organizes them into formation records to progressively poison model skills via…

zju-llm-safety/ascent

Fine-tuning framework that applies first-order optimal safety calibration and periodic recalibration to LLMs, preserving safety-compatible updates…

abhinavdubey30/perturbed-embedding-vectors

Code, response logs and labels for the paper Jailbreaking Open-Weight LLMs via Random Embedding Perturbations

jisung-pacific/hdi-graphrag-attack

Research implementation of Hop-Decayed Influence (HDI) and the 3S attack framework, exposing structural auxiliary indexing vulnerabilities in…

greshake/llm-security

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…

euph00/zoneclaw-code

Benchmark and defense code for persistent memory attacks on OpenClaw-style computer-use agents, with memory-zoning mitigation, attack scenarios, and…

sliu11-byte/mea-bench

A lifecycle benchmark for black-box LLM extraction attacks, defenses, and adaptive attacks.

js-lee-ai/refusal-relocates

Refusal localizes, the damage relocates, safety layers under few-sample fine-tuning

kevinchunye/prompt_injection

Benchmark harness measuring where prompt injection defenses fire in tool-using LLM agent pipelines, tracking canary tokens across exposed, persisted,…

guzonghua/awesome-latency-attacks

Curated index of deep learning latency, energy-latency & timing (availability) attacks and defenses — companion to the ACM Computing Surveys…