Tools

phil-fan/fs-attack

Implementation of the paper "Rethinking Latency Denial-of-Service: Attack the LLM Serving Framework, Not the Model"

multimodal-ai-lab/tobac

Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models (NeurIPS'26)

moontea0416/webmirage

Adversarial image attacks on vision-language web agents, from visual grounding to browser execution

stardust457/sldr

Defense framework that mitigates malicious fine-tuning of LLMs using selective layer recovery and dynamic routing, with training, harmfulness…

danigil/neuperm

Zero-retraining sanitization that reorders permutation-equivalent neural network units to destroy malware embedded via weight-steganography attacks…

graph-com/cka-agent

Research implementation of an LLM jailbreak agent that bypasses commercial model guardrails using harmless prompt weaving and adaptive tree search.

githubsecuritylab/seclab-taskflow-agent

MCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…

uiuc-kang-lab/persistbd

Research code for training adapters that make LLM agent backdoors survive benign fine-tuning, with trigger-rate scoring, SWE-bench evaluation, and…

deep-jlu/skillpoison

Research pipeline that constructs verified successful experiences and organizes them into formation records to progressively poison model skills via…

zju-llm-safety/ascent

Fine-tuning framework that applies first-order optimal safety calibration and periodic recalibration to LLMs, preserving safety-compatible updates…

tz98lab/dlr-ne-ics-security

Research code implementing Dynamical Low-Rank Nash Equilibrium computation for stochastic ICS security games between advanced persistent threats and…

abhinavdubey30/perturbed-embedding-vectors

Code, response logs and labels for the paper Jailbreaking Open-Weight LLMs via Random Embedding Perturbations

arxhr007/aliens_eye

Hunt down 840+ social media accounts using AI

jisung-pacific/hdi-graphrag-attack

Research implementation of Hop-Decayed Influence (HDI) and the 3S attack framework, exposing structural auxiliary indexing vulnerabilities in…

lzwhehe/benign-instruction-bench

Re-evaluating prompt-injection detectors on LLM agent tool outputs (paper draft, scripts, scores)

hoodoer/colonelclustered

A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…

rbidou/pyrasp

Runtime Application Self Protection for Python web servers, serverless functions and MCP servers, detecting attacks, prompt injection and data leaks…