Topics / #llm-jailbreak

LLM jailbreak projects on GitHub

LLM jailbreaks: attempts to bypass model safety guardrails, for security research.

As of , the most-starred LLM jailbreak projects on GitHub are L1B3RT4S (21.9K stars), dsh-purge (7.7K stars) and AI-Infra-Guard (6.9K stars). GitHub.Locker tracks 5 LLM jailbreak repositories with 41.7K stars combined. The fastest-growing on October 18 was dsh-purge, with +418 stars in a day.

5Projects
41.7KStars in total
+495Stars in a day
Browse in the catalog →github.com/topics/llm-jailbreak ↗

Hot right now

Most stars gained in a day · Oct 18

+418

dsh-purge

YuJunZhiXue/dsh-purge · ★ 7.7K

It is a jailbreak plugin (破甲, literally 'armor-break') for DeepSeek Harness: it patches the installed @deepseek-ai packages so every model in the harness can be jailbroken, with prompts swapped per model. The default prompt is aimed at Chinese models such as 小码酱.

+25

L1B3RT4S

elder-plinius/L1B3RT4S · ★ 21.9K

A public collection of jailbreak prompts — the author calls them 'liberation prompts' — meant to make flagship AI models respond without their usual refusals. It is maintained by AI red-teamer elder-plinius.

+21

gpt6-Astra

3641397194-wq/gpt6-Astra · ★ 1.1K

It is 'Cold Brew' (CHA), a jailbreak prompt workbench that packages prompt-injection techniques to break the safety guardrails ('破甲越狱') of six chat models — GPT-6 Astra/Codex, Claude Code, Grok 4.6, DeepSeek v4 Pro, GLM 5.3 and Gemini — for security research.

+19

Spiritual-Spell-Red-Teaming

Goochbeater/Spiritual-Spell-Red-Teaming · ★ 4K

A public collection of jailbreak prompts — the author calls them 'spells' — written to get uncensored answers out of LLMs, mainly Claude.

The all-time top

5 projects · by stars

  1. #1 · elder-plinius/L1B3RT4S

    L1B3RT4S

    A public collection of jailbreak prompts — the author calls them 'liberation prompts' — meant to make flagship AI models respond without their usual refusals. It is maintained by AI red-teamer elder-plinius.

    21.9K
  2. #2 · YuJunZhiXue/dsh-purge

    dsh-purge

    It is a jailbreak plugin (破甲, literally 'armor-break') for DeepSeek Harness: it patches the installed @deepseek-ai packages so every model in the harness can be jailbroken, with prompts swapped per model. The default prompt is aimed at Chinese models such as 小码酱.

    7.7K
  3. #3 · Tencent/AI-Infra-Guard

    AI-Infra-Guard

    AI-Infra-Guard (A.I.G) is a full-stack AI red teaming platform built by Tencent Zhuque Lab that scans AI agents, MCP servers, agent skills, and AI infrastructure components for security vulnerabilities, and evaluates LLMs against jailbreak attacks.

    6.9K
  1. 4

    Spiritual-Spell-Red-Teaming

    4KGoochbeater/Spiritual-Spell-Red-Teaming

    A public collection of jailbreak prompts — the author calls them 'spells' — written to get uncensored answers out of LLMs, mainly Claude.

  2. 5

    gpt6-Astra

    1.1K3641397194-wq/gpt6-Astra · JavaScript

    It is 'Cold Brew' (CHA), a jailbreak prompt workbench that packages prompt-injection techniques to break the safety guardrails ('破甲越狱') of six chat models — GPT-6 Astra/Codex, Claude Code, Grok 4.6, DeepSeek v4 Pro, GLM 5.3 and Gemini — for security research.

Often tagged together