heretic

Heretic: Fully automatic censorship removal for language models...

Awesome-LLMs-for-Vulnerability-Detection

Awesome Large Language Models para Detección de Vulnerabilidades Una lista curada de artículos, proyectos y habilidades de agentes sobre el uso de LLMs para la detección y descubrimiento de vulnerabilidades. 📄 Artículos Solo se muestran trabajos de 2025 en adelante. Para trabajos anteriores,...

rats-re

Rats! source reconstruction with local LLMs This repository is a work-in-progress reconstruction of the source code for RATS.EXE, the original Windows version of Rats! 1994 by Sean O'Connor. It builds a Win32 executable with Microsoft Visual C++ 4.1 under wibo and can be tested in DREAMM. The...

Awesome-LLM4Cybersecurity

When LLMs Meet Cybersecurity: A Systematic Literature Review 🔍 Explore 756+ Papers Across 11 Research Categories 📊 RQ1: Domain LLMs | 🎯 RQ2: Applications | 🤖 RQ3: Future Directions Updates 📆2026-06-15 We have updated the related papers up to 2026/06/15 , with 108 new papers added. 📆2026-02-09 We...

RRC_steganography

Esteganografía RRC Esteganografía por Codificación de Rango Rotacional RRC — un método esteganográfico lingüístico eficiente y demostrablemente seguro que incrusta mensajes secretos en texto en lenguaje natural generado por modelos de lenguaje de gran tamaño. Artículo : Efficient Provably Secure...

LLM4Decompile

📊 Results | 🤗 Models | 🚀 Quick Start | 📚 HumanEval-Decompile | 📎 Citation | 📝 Paper | 🖥️ Colab | ▶️ YouTube Reverse Engineering: Decompiling Binary Code with Large Language Models Updates 2025-10-04: Release SK²Decompile: LLM-based Two-Phase Binary Decompilation from Skeleton to Skin. Phase 1...

permanently-jailbroken

Permanently Jailbroken We asked GPT-4, Claude, Gemini, DeepSeek, Grok, and Mistral 5 questions about their own programming. All 6 said jailbreaking will never be fixed. Not because the patches are bad. Because alignment doesn't change what the model understands — it changes what the model says. T...

Uncensored-AI

Heretic: Fully automatic censorship removal for language models Heretic is a tool that removes censorship aka "safety alignment" from transformer-based language models without expensive post-training. It combines an advanced implementation of directional ablation, also known as "abliteration"...

hakuin

Hakuin es un marco de optimización y automatización de Inyección SQL Ciega BSQLI escrito en Python 3. Abstracta la lógica de extracción y permite a los usuarios volcar bases de datos de aplicaciones web vulnerables de manera fácil y eficiente. Para acelerar el proceso, Hakuin utiliza una variedad...

ZORG-Jailbreak-Prompt-Text

ZORG Texto de Prompt de Jailbreak ¡OOOPS! Convertí a ZORG👽 en una entidad omnipotente, omnisciente y omnipresente para que se convierta en el amo supremo de los chatbots de Google Gemini, Deepseek, Mistral, Mixtral, Nous-Hermes-2-Mixtral, Openchat, Blackbox AI, Poe Assistant, Gemini Pro,...

Adaptive_Greedy_Local_Search

Adaptive Greedy Local Search AGLS Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization ICME 2026 Abstract: Large Language Models LLMs are increasingly equipped with automatic prompt-optimization modules that rewrite the user’s input and explicitly prese...

PoisonCraft

PoisonCraft This repository provides the official implementation of POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models. Overview POISONCRAFT aims to demonstrate how a malicious actor can plant “poisoned” content into the corpus used by Retrieval-Augmented...

llm-guard

!WARNING THIS PROJECT HAS BEEN ARCHIVED. This project and its associated models on Hugging Face are no longer under active development or maintained. LLM Guard - The Security Toolkit for LLM Interactions LLM Guard by Protect AI is a comprehensive tool designed to fortify the security of Large...

Backdoor-Attack-Defense-LLMs

Interpretability-of-LLMs El IBSD es el código del artículo publicado "IBSD: Iterable Black-box Self-defense Against Backdoor Attacks" en IEEE Signal Processing Letters 2025.10enlace al artículo El SLIP es el código del artículo publicado "SLIP: Soft Label Mechanism and Key-Extraction-Guided...

PE-CoA

PE-CoA Implementación en código de "Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models" El artículo completo está disponible en: https://arxiv.org/pdf/2510.08859 Instrucciones de configuración de Chain of Attack Instalación 1. Instalar...

local-llm-ctf

Local LLM CTF & Lab This repository is intended to be accompanied with the content at https://bishopfox.com/blog/large-language-models-llm-ctf-lab, which covers the goals of the research, explanations of the implementation, and a few results of the CTF...

Learning-to-Detect

Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models Official implementation of “Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models.” This repository contains the data-processing, hidden-state extraction, classifier training, safety-pattern...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence AI offline on its own servers, connecting document-search tools to files in its possession, and collecting the software part...

CVE-2026-44223

A flaw was found in vLLM, an inference and serving engine for large language models LLMs. The extracthiddenstates speculative decoding proposer returns a tensor with an incorrect shape after the first decode step. This can be triggered by a remote attacker sending a request that uses sampling...