Alternatives and similar repositories for ASB

Users that are interested in ASB are comparing it to the libraries listed below

• uiuc-kang-lab / InjecAgent
  ☆97Updated last year
• AI-secure / AgentPoison
  [NeurIPS 2024] Official implementation for "AgentPoison: Red-teaming LLM Agents via Memory or Knowledge Base Backdoor Poisoning"
  ☆179Updated 8 months ago
• lancopku / agent-backdoor-attacks
  Code&Data for the paper "Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents" [NeurIPS 2024]
  ☆102Updated last year
• AI-secure / RedCode
  [NeurIPS'24] RedCode: Risky Code Execution and Generation Benchmark for Code Agents
  ☆60Updated 3 weeks ago
• BHui97 / PLeak
  ☆73Updated 11 months ago
• sleeepeer / PoisonedRAG
  [USENIX Security 2025] PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
  ☆219Updated 3 weeks ago
• rucnyz / LeakAgent
  ☆26Updated 3 months ago
• usail-hkust / JailTrickBench
  Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs. Empirical tricks for LLM Jailbreaking. (NeurIPS 2024)
  ☆155Updated last year
• AI45Lab / ActorAttack
  ☆112Updated 10 months ago
• pasquini-dario / LLM_NeuralExec
  Code to generate NeuralExecs (prompt injection for LLMs)
  ☆25Updated 2 months ago
• SheltonLiu-N / Universal-Prompt-Injection
  The official implementation of our pre-print paper "Automatic and Universal Prompt Injection Attacks against Large Language Models".
  ☆65Updated last year
• chen37058 / Red-Team-Arxiv-Paper-Update
  Awesome Jailbreak, red teaming arxiv papers (Automatically Update Every 12th hours)
  ☆80Updated this week
• ShiJiawenwen / JudgeDeceiver
  [CCS 2024] Optimization-based Prompt Injection Attack to LLM-as-a-Judge
  ☆36Updated 2 months ago
• liu00222 / Open-Prompt-Injection
  This repository provides a benchmark for prompt injection attacks and defenses
  ☆352Updated last month
• CryptoAILab / JailbreakEval
  [NDSS'25 Best Technical Poster] A collection of automated evaluators for assessing jailbreak attempts.
  ☆175Updated 8 months ago
• ChenWu98 / agent-attack
  [ICLR 2025] Dissecting adversarial robustness of multimodal language model agents
  ☆121Updated 9 months ago
• bboylyg / BackdoorLLM
  [NeurIPS 2025] BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models
  ☆254Updated last month
• thu-coai / Agent-SafetyBench
  ☆78Updated 4 months ago
• Allen-piexl / JailbreakZoo
  ☆153Updated last year
• GodXuxilie / PromptAttack
  An LLM can Fool Itself: A Prompt-Based Adversarial Attack (ICLR 2024)
  ☆107Updated 10 months ago
• Django-Jiang / BadChain
  [ICLR24] Official Repo of BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models
  ☆43Updated last year
• OSU-NLP-Group / AgentSafety
  ☆146Updated last month
• WUSTL-CSPL / LLMJailbreak
  ☆37Updated last year
• Sizhe-Chen / StruQ
  official implementation of [USENIX Sec'25] StruQ: Defending Against Prompt Injection with Structured Queries
  ☆54Updated last month
• HKUST-KnowComp / LLM-Multistep-Jailbreak
  Code for Findings-EMNLP 2023 paper: Multi-step Jailbreaking Privacy Attacks on ChatGPT
  ☆35Updated 2 years ago
• IS2Lab / S-Eval
  S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models
  ☆105Updated last month
• RICommunity / TAP
  TAP: An automated jailbreaking method for black-box LLMs
  ☆201Updated last year
• akumar2709 / OVERTHINK_public
  ☆43Updated last month
• SheltonLiu-N / AutoDAN
  [ICLR 2024] The official implementation of our ICLR2024 paper "AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language M…
  ☆404Updated 10 months ago
• tmlr-group / DeepInception
  [arXiv:2311.03191] "DeepInception: Hypnotize Large Language Model to Be Jailbreaker"
  ☆165Updated last year