Alternatives and similar repositories for XTransferBench

Users that are interested in XTransferBench are comparing it to the libraries listed below

• huanranchen / VLMTransfer
  A package that achieves 95%+ transfer attack success rate against GPT-4
  ☆26Updated last year
• ffhibnese / CPGC_VLP_Universal_Attacks
  [ICCV-2025] Universal Adversarial Attack, Multimodal Adversarial Attacks, VLP models, Contrastive Learning, Cross-modal Perturbation Gene…
  ☆34Updated 6 months ago
• jiaxiaojunQAQ / FOA-Attack
  Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment (NeurIPS 2025)
  ☆45Updated 3 months ago
• LiangSiyuan21 / BadCLIP
  ☆30Updated last year
• KuofengGao / Verbose_Images
  [ICLR 2024] Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images
  ☆42Updated 2 years ago
• ericyinyzy / VLAttack
  This is an official repository of ``VLAttack: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models'' (NeurIPS 2…
  ☆66Updated 10 months ago
• jiawangbai / BadCLIP
  Implementation of BadCLIP https://arxiv.org/pdf/2311.16194.pdf
  ☆23Updated last year
• Haochen-Luo / CroPA
  ☆55Updated last year
• NY1024 / BAP-Jailbreak-Vision-Language-Models-via-Bi-Modal-Adversarial-Prompt
  ☆57Updated last year
• gq-max / AdvDiffVLM
  ☆48Updated 10 months ago
• erfanshayegani / Jailbreak-In-Pieces
  [ICLR 2024 Spotlight 🔥 ] - [ Best Paper Award SoCal NLP 2023 🏆] - Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal…
  ☆78Updated last year
• YitingQu / unsafe-diffusion
  ☆47Updated last year
• jiamingzhang94 / AnyAttack
  CVPR 2025 - Anyattack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models
  ☆66Updated 6 months ago
• RUCAIBox / HADES
  [ECCV'24 Oral] The official GitHub page for ''Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking …
  ☆34Updated last year
• yibo-miao / T2VSafetyBench
  ☆25Updated last year
• datar001 / Awesome-AD-on-T2IDM
  A collection of resources on attacks and defenses targeting text-to-image diffusion models
  ☆90Updated last month
• Zoky-2020 / SGA
  Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models. [ICCV 2023 Oral]
  ☆71Updated 2 years ago
• huanranchen / AdversarialAttacks
  ☆80Updated last year
• ZhentingWang / DIAGNOSIS
  ☆23Updated last year
• jiaxiaojunQAQ / OmniSafeBench-MM
  A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack–Defense Evaluation
  ☆56Updated 2 weeks ago
• itsvaibhav01 / Immune
  [CVPR2025] Official Repository for IMMUNE: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment
  ☆27Updated 7 months ago
• umd-huang-lab / VLM-Poisoning
  Code for Neurips 2024 paper "Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"
  ☆59Updated last year
• OPTML-Group / QF-Attack
  [CVPR23W] "A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion" by Haomin Zhuang, Yihua Zhang and Sijia Liu
  ☆26Updated last year
• thu-ml / Attack-Bard
  ☆109Updated last year
• Shelton1013 / Chain_of_Attack
  [CVPR'25]Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks
  ☆29Updated 7 months ago
• haowang02 / EvilEdit
  [MM '24] EvilEdit: Backdooring Text-to-Image Diffusion Models in One Second
  ☆27Updated last year
• abc03570128 / Jailbreaking-Attack-against-Multimodal-Large-Language-Model
  ☆58Updated last year
• MaTengSYSU / HIMRD-jailbreak
  Code repository for the paper "Heuristic Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models"
  ☆15Updated 6 months ago
• linweiii / BackdoorDM
  [NeurIPS 2025 D&B] BackdoorDM: A Comprehensive Benchmark for Backdoor Learning in Diffusion Model
  ☆24Updated 6 months ago
• WUSTL-CSPL / RIATIG
  ☆28Updated 2 years ago