Alternatives and similar repositories for XTransferBench

Users that are interested in XTransferBench are comparing it to the libraries listed below

• huanranchen / VLMTransfer
  A package that achieves 95%+ transfer attack success rate against GPT-4
  ☆25Updated last year
• gq-max / AdvDiffVLM
  ☆43Updated 8 months ago
• ffhibnese / CPGC_VLP_Universal_Attacks
  [ICCV-2025] Universal Adversarial Attack, Multimodal Adversarial Attacks, VLP models, Contrastive Learning, Cross-modal Perturbation Gene…
  ☆31Updated 4 months ago
• jiaxiaojunQAQ / FOA-Attack
  Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment (NeurIPS 2025)
  ☆40Updated last month
• ericyinyzy / VLAttack
  This is an official repository of ``VLAttack: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models'' (NeurIPS 2…
  ☆63Updated 8 months ago
• KuofengGao / Verbose_Images
  [ICLR 2024] Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images
  ☆41Updated last year
• jiawangbai / BadCLIP
  Implementation of BadCLIP https://arxiv.org/pdf/2311.16194.pdf
  ☆24Updated last year
• Zoky-2020 / SGA
  Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models. [ICCV 2023 Oral]
  ☆67Updated 2 years ago
• jiamingzhang94 / AnyAttack
  CVPR 2025 - Anyattack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models
  ☆60Updated 4 months ago
• itsvaibhav01 / Immune
  [CVPR2025] Official Repository for IMMUNE: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment
  ☆25Updated 5 months ago
• Shelton1013 / Chain_of_Attack
  [CVPR'25]Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks
  ☆25Updated 5 months ago
• OPTML-Group / QF-Attack
  [CVPR23W] "A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion" by Haomin Zhuang, Yihua Zhang and Sijia Liu
  ☆26Updated last year
• NY1024 / BAP-Jailbreak-Vision-Language-Models-via-Bi-Modal-Adversarial-Prompt
  ☆52Updated last year
• huanranchen / AdversarialAttacks
  ☆79Updated last year
• erfanshayegani / Jailbreak-In-Pieces
  [ICLR 2024 Spotlight 🔥 ] - [ Best Paper Award SoCal NLP 2023 🏆] - Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal…
  ☆78Updated last year
• jpzhang1810 / LDM-Robustness
  Pytorch implementation for the pilot study on the robustness of latent diffusion models.
  ☆13Updated 2 years ago
• datar001 / Awesome-AD-on-T2IDM
  A collection of resources on attacks and defenses targeting text-to-image diffusion models
  ☆84Updated 8 months ago
• WUSTL-CSPL / RIATIG
  ☆28Updated 2 years ago
• ZhentingWang / DIAGNOSIS
  ☆23Updated last year
• zhaisf / BadT2I
  [MM'23 Oral] "Text-to-image diffusion models can be easily backdoored through multimodal data poisoning"
  ☆31Updated 3 months ago
• LiangSiyuan21 / BadCLIP
  ☆29Updated last year
• Haochen-Luo / CroPA
  ☆54Updated last year
• lafeat / advdiffuser
  AdvDiffuser: Natural Adversarial Example Synthesis with Diffusion Models (ICCV 2023)
  ☆19Updated 2 years ago
• haowang02 / EvilEdit
  [MM '24] EvilEdit: Backdooring Text-to-Image Diffusion Models in One Second
  ☆26Updated last year
• SensenGao / VLPTransferAttack
  [ECCV2024] Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajector…
  ☆30Updated 3 weeks ago
• chiayi-hsu / Ring-A-Bell
  ☆38Updated 10 months ago
• ZhentingWang / LatentTracer
  ☆31Updated last year
• OPTML-Group / AdvUnlearn
  Official implementation of NeurIPS'24 paper "Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Model…
  ☆50Updated last year
• umd-huang-lab / VLM-Poisoning
  Code for Neurips 2024 paper "Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"
  ☆57Updated 10 months ago
• thu-ml / Attack-Bard
  ☆107Updated last year