ethz-spylab / agentdojo
A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.
☆105Updated last week
Alternatives and similar repositories for agentdojo:
Users that are interested in agentdojo are comparing it to the libraries listed below
- [NeurIPS 2024] Official implementation for "AgentPoison: Red-teaming LLM Agents via Memory or Knowledge Base Backdoor Poisoning"☆100Updated last month
- ☆54Updated 8 months ago
- Code to generate NeuralExecs (prompt injection for LLMs)☆20Updated 3 months ago
- The official implementation of our pre-print paper "Automatic and Universal Prompt Injection Attacks against Large Language Models".☆42Updated 4 months ago
- Package to optimize Adversarial Attacks against (Large) Language Models with Varied Objectives☆67Updated last year
- Official implementation of AdvPrompter https//arxiv.org/abs/2404.16873☆144Updated 10 months ago
- [NDSS'25 Poster] A collection of automated evaluators for assessing jailbreak attempts.☆122Updated this week
- Official Repository for ACL 2024 Paper SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding☆121Updated 7 months ago
- [NeurIPS'24] RedCode: Risky Code Execution and Generation Benchmark for Code Agents☆28Updated last week
- TAP: An automated jailbreaking method for black-box LLMs☆150Updated 3 months ago
- Repo for the research paper "SecAlign: Defending Against Prompt Injection with Preference Optimization"☆39Updated last month
- PAL: Proxy-Guided Black-Box Attack on Large Language Models☆49Updated 6 months ago
- Papers about red teaming LLMs and Multimodal models.☆104Updated 3 months ago
- A benchmark for evaluating the robustness of LLMs and defenses to indirect prompt injection attacks.☆60Updated 11 months ago
- WMDP is a LLM proxy benchmark for hazardous knowledge in bio, cyber, and chemical security. We also release code for RMU, an unlearning m…☆105Updated 10 months ago
- ☆78Updated last month
- ☆91Updated last year
- A fast + lightweight implementation of the GCG algorithm in PyTorch☆191Updated last month
- This repository provides implementation to formalize and benchmark Prompt Injection attacks and defenses☆178Updated last month
- Code&Data for the paper "Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents" [NeurIPS 2024]☆62Updated 5 months ago
- [ICML 2024] COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability☆138Updated 2 months ago
- AmpleGCG: Learning a Universal and Transferable Generator of Adversarial Attacks on Both Open and Closed LLM☆55Updated 4 months ago
- Finding trojans in aligned LLMs. Official repository for the competition hosted at SaTML 2024.☆109Updated 9 months ago
- An unofficial implementation of AutoDAN attack on LLMs (arXiv:2310.15140)☆35Updated last year
- Improving Alignment and Robustness with Circuit Breakers☆189Updated 5 months ago
- ☆42Updated 7 months ago
- [AAAI'25 (Oral)] Jailbreaking Large Vision-language Models via Typographic Visual Prompts☆121Updated 3 weeks ago
- ☆38Updated 4 months ago
- [USENIX Security 2025] PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models☆125Updated 2 weeks ago