rosesecurity/anti-virus-evading-payloadsDuring the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…
jwillyamz/ezemuSee adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
es0j/execaslr-ekopartyProof-of-concept exploit that bypasses ASLR on Intel CPUs by abusing branch target buffer and speculative execution to leak randomized addresses via…
secml/secmlA Python library for Secure and Explainable Machine Learning Documentation available @ https://secml.gitlab.io Follow us on Twitter @…
pixee/compaction-launderingSecurity research on context compaction in coding agents: shows how forged role labels in untrusted content survive summarization and get executed,…
wang-yanting/agentwatcherCausal context attribution and rule-based monitor LLM defense against indirect prompt injection in LLM agents, achieving state-of-art performance on…
zhou-cybersecurity-ai/synghostSyntactic Ghost: An Imperceptible General-purpose Backdoor Attacks on Pre-trained Language Models
camillegr/cve-2026-73292Proof-of-concept exploit for CVE-2026-73292: CSRF attack on Semaphore UI password change endpoint, serving a malicious page that silently resets an…
josh-blythe/bordair-detectorTwo-stage prompt-injection and jailbreak detector: regex gates plus a quantised DeBERTa-v3 ONNX classifier, with image, document, and audio support.…
sisl-uri/t-backdoorResearch code implementing T-Backdoor, temporal-trigger backdoor attacks on spiking neural networks using rate, latency, and jitter triggers without…
kuro0911/cs5446-projectCode repository for CS5446 project exploring defenses against jailbreak attacks on large-language models it includes datasets, notebooks,…
shiva108/ai-llm-red-team-handbookAI / LLM Red Team Field Manual & Consultant’s Handbook
redcanaryco/chain-reactorGenerate Linux executables that simulate adversary behaviors and techniques for testing detection and response coverage. Consumes JSON for easy…
ai45lab/skill-safety-benchBenchmark for evaluating AI agent safety against attacks embedded in skill-facing context, with 155 cases across 6 risk domains, measuring task…
owasp/ai-vulnerabilities-playgroundHands-on AI security lab platform with 50+ scenarios across prompt injection, agentic system exploitation, model manipulation, and MCP trust boundary…
suels-group/beyond_asrResearch code for measuring jailbreak attack success rates (ASR and stepwise ASR) against LLMs, with implementations of attacks such as GCG and…
phkhanhtrinh23/agasLLM-driven agentic group shilling attack framework that manipulates black-box collaborative-filtering recommender rankings using adaptive multi-role…
greshake/llm-securityProof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…
