Alternatives and similar repositories for XTransferBench

Users that are interested in XTransferBench are comparing it to the libraries listed below

• huanranchen / VLMTransfer
  A package that achieves 95%+ transfer attack success rate against GPT-4
  ☆23Updated 8 months ago
• KuofengGao / Verbose_Images
  [ICLR 2024] Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images
  ☆35Updated last year
• LiangSiyuan21 / BadCLIP
  ☆23Updated 10 months ago
• NY1024 / BAP-Jailbreak-Vision-Language-Models-via-Bi-Modal-Adversarial-Prompt
  ☆46Updated last year
• Shelton1013 / Chain_of_Attack
  [CVPR'25]Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks
  ☆14Updated last month
• ffhibnese / CPGC_VLP_Universal_Attacks
  [ICCV-2025] Universal Adversarial Attack, Multimodal Adversarial Attacks, VLP models, Contrastive Learning, Cross-modal Perturbation Gene…
  ☆19Updated 3 weeks ago
• itsvaibhav01 / Immune
  [CVPR2025] Official Repository for IMMUNE: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment
  ☆19Updated last month
• jiamingzhang94 / AnyAttack
  CVPR 2025 - Anyattack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models
  ☆40Updated 3 weeks ago
• ericyinyzy / VLAttack
  This is an official repository of ``VLAttack: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models'' (NeurIPS 2…
  ☆55Updated 3 months ago
• erfanshayegani / Jailbreak-In-Pieces
  [ICLR 2024 Spotlight 🔥 ] - [ Best Paper Award SoCal NLP 2023 🏆] - Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal…
  ☆61Updated last year
• jiawangbai / BadCLIP
  Implementation of BadCLIP https://arxiv.org/pdf/2311.16194.pdf
  ☆21Updated last year
• RUCAIBox / HADES
  [ECCV'24 Oral] The official GitHub page for ''Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking …
  ☆25Updated 8 months ago
• Haochen-Luo / CroPA
  ☆44Updated 7 months ago
• OPTML-Group / QF-Attack
  [CVPR23W] "A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion" by Haomin Zhuang, Yihua Zhang and Sijia Liu
  ☆26Updated 10 months ago
• tmllab / 2025_ICLR_PiF
  ☆27Updated last month
• Zoky-2020 / SGA
  Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models. [ICCV 2023 Oral]
  ☆64Updated last year
• Sadcardation / MLLM-Refusal
  Repository for the Paper: Refusing Safe Prompts for Multi-modal Large Language Models
  ☆17Updated 9 months ago
• huanranchen / AdversarialAttacks
  ☆75Updated 11 months ago
• ZhentingWang / DIAGNOSIS
  ☆20Updated last year
• YitingQu / unsafe-diffusion
  ☆36Updated last year
• thu-ml / Attack-Bard
  ☆102Updated last year
• jpzhang1810 / LDM-Robustness
  Pytorch implementation for the pilot study on the robustness of latent diffusion models.
  ☆11Updated 2 years ago
• 20000yshust / SWARM
  [CVPR 2024] Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transfomers
  ☆17Updated 8 months ago
• thinwayliu / Multimodal-Unlearnable-Examples
  The code for ACM MM2024 (Multimodal Unlearnable Examples: Protecting Data against Multimodal Contrastive Learning)
  ☆13Updated 11 months ago
• datar001 / Awesome-AD-on-T2IDM
  A collection of resources on attacks and defenses targeting text-to-image diffusion models
  ☆72Updated 3 months ago
• thunxxx / MLLM-Jailbreak-evaluation-MMJ-Bench
  ☆52Updated 3 months ago
• umd-huang-lab / VLM-Poisoning
  Code for Neurips 2024 paper "Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"
  ☆50Updated 6 months ago
• gq-max / AdvDiffVLM
  ☆34Updated 3 months ago
• researchcode001 / daca
  Divide-and-Conquer Attack: Harnessing the Power of LLM to Bypass the Censorship of Text-to-Image Generation Mode
  ☆18Updated 5 months ago
• jzhang538 / CorruptEncoder
  [CVPR 2024] "Data Poisoning based Backdoor Attacks to Contrastive Learning": official code implementation.
  ☆16Updated 5 months ago