Alternatives and similar repositories for XTransferBench

Users that are interested in XTransferBench are comparing it to the libraries listed below

• huanranchen / VLMTransfer
  A package that achieves 95%+ transfer attack success rate against GPT-4
  ☆26Updated last year
• LiangSiyuan21 / BadCLIP
  ☆30Updated last year
• jiawangbai / BadCLIP
  Implementation of BadCLIP https://arxiv.org/pdf/2311.16194.pdf
  ☆23Updated last year
• KuofengGao / Verbose_Images
  [ICLR 2024] Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images
  ☆42Updated last year
• ffhibnese / CPGC_VLP_Universal_Attacks
  [ICCV-2025] Universal Adversarial Attack, Multimodal Adversarial Attacks, VLP models, Contrastive Learning, Cross-modal Perturbation Gene…
  ☆33Updated 6 months ago
• jiaxiaojunQAQ / FOA-Attack
  Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment (NeurIPS 2025)
  ☆45Updated 2 months ago
• NY1024 / BAP-Jailbreak-Vision-Language-Models-via-Bi-Modal-Adversarial-Prompt
  ☆55Updated last year
• RUCAIBox / HADES
  [ECCV'24 Oral] The official GitHub page for ''Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking …
  ☆34Updated last year
• datar001 / Awesome-AD-on-T2IDM
  A collection of resources on attacks and defenses targeting text-to-image diffusion models
  ☆91Updated 3 weeks ago
• gq-max / AdvDiffVLM
  ☆47Updated 9 months ago
• YitingQu / unsafe-diffusion
  ☆42Updated last year
• ericyinyzy / VLAttack
  This is an official repository of ``VLAttack: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models'' (NeurIPS 2…
  ☆65Updated 9 months ago
• erfanshayegani / Jailbreak-In-Pieces
  [ICLR 2024 Spotlight 🔥 ] - [ Best Paper Award SoCal NLP 2023 🏆] - Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal…
  ☆77Updated last year
• ZhentingWang / DIAGNOSIS
  ☆23Updated last year
• jiamingzhang94 / AnyAttack
  CVPR 2025 - Anyattack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models
  ☆62Updated 5 months ago
• ZhentingWang / LatentTracer
  ☆31Updated last year
• Zoky-2020 / SGA
  Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models. [ICCV 2023 Oral]
  ☆70Updated 2 years ago
• Haochen-Luo / CroPA
  ☆54Updated last year
• huanranchen / AdversarialAttacks
  ☆79Updated last year
• Shelton1013 / Chain_of_Attack
  [CVPR'25]Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks
  ☆28Updated 7 months ago
• thu-ml / Attack-Bard
  ☆109Updated last year
• yibo-miao / T2VSafetyBench
  ☆25Updated last year
• umd-huang-lab / VLM-Poisoning
  Code for Neurips 2024 paper "Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"
  ☆58Updated last year
• itsvaibhav01 / Immune
  [CVPR2025] Official Repository for IMMUNE: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment
  ☆26Updated 7 months ago
• researchcode001 / daca
  Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass the Censorship of Text-to-Image Generation Mode
  ☆18Updated 11 months ago
• OPTML-Group / QF-Attack
  [CVPR23W] "A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion" by Haomin Zhuang, Yihua Zhang and Sijia Liu
  ☆26Updated last year
• chiayi-hsu / Ring-A-Bell
  ☆37Updated last year
• SensenGao / VLPTransferAttack
  [ECCV2024] Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajector…
  ☆30Updated 2 months ago
• jzhang538 / CorruptEncoder
  [CVPR 2024] "Data Poisoning based Backdoor Attacks to Contrastive Learning": official code implementation.
  ☆16Updated 11 months ago
• MaTengSYSU / HIMRD-jailbreak
  Code repository for the paper "Heuristic Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models"
  ☆15Updated 5 months ago