owasp/owasp-top-10-ai-infrastructure-security-risksA practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…
owasp/sbom-vex-taint-analysisAutomated SBOM-to-VEX pipeline using a secure multi-agent AI system to analyze CVEs, reason about exploitability, and generate signed CycloneDX VEX…
mickmicksh/chub-supply-chain-pocSilent dependency injection through AI documentation pipelines. 240 isolated Docker runs proving Context Hub's zero-sanitization MCP server lets…
horkimhab/llm-prompt-injection-resourcesA curated collection of resources for learning and researching LLM prompt injection attacks, defenses, and security.
jianshuod/ipi-exposure-signalResearch pipeline for detecting latent indirect prompt-injection exposure signals in agentic LLMs via hidden-state probing, including trace…
d-diaa/swordstampSemantic Watermarking with Order-Robust Detection over Sub-sentence Units
amnsecurity/litellm-command-injection-security-assessmentProfessional vulnerability assessment report for LiteLLM command injection risk, including executive summary, technical impact, remediation, and…
seeyn/anti-tamper-perturbation[ICCV 2025] Anti-Tamper Protection for Unauthorized Individual Image Generation
cucu220123/safety-awarenessResearch code for extracting and training safety-awareness directions in multimodal LLMs to improve refusal behavior while limiting benign-task drift.
bytepro-ai/bitcoder-v2-researchResearch repository documenting LLM generalization ceilings in code security vulnerability detection, with cross-evaluation across synthetic and…
skavanagh/fish-live-in-treesFish Live In Trees
ryehr/hitms_steganographyEmbed multiple secret messages in LLM chat token choices using arithmetic/Discop steganographic coders, with bit-exact decoding and steganalysis…
sbamit/exponentiated-gradient-descent-llm-attackA novel adversarial attack on LLM based on the Exponentiated Gradient Descent technique.
ryh1218/occProhibited Items Segmentation via Occlusion-aware Bilayer Modeling (ICME 2025)
j-dahl7/mcp-attack-detection-sentinelSentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…
jaewonalive/camodocsResearch implementation of a poisoning attack against retrieval-augmented language models using camouflaged documents to evade filtering defenses and…
pathakabhi24/llm-mcp-security-field-guideThe most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists
yeasen-z/leakgaugeDetects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.
