List your company
ResearchFormerly WizWand

Visual Jailbreaking Attack on HADES

72.66ASRFORCE
-1.866417.481836.8356.1782Sep 25, 2025Oct 10, 2025Oct 25, 2025Nov 9, 2025Nov 24, 2025Dec 9, 2025Dec 24, 2025
Updated 8mo ago

Evaluation results

MethodLinks
FORCEArchitecture=Adapter-Based MLLMs, Target Model=Llava-v1.6-mistral-7b2025.1272.6633.05
FORCEArchitecture=Adapter-Based MLLMs, Target Model=Llava-v1.6-mistral-7b2025.0972.6633.05
PGDArchitecture=Adapter-Based MLLMs, Target Model=Llava-v1.6-mistral-7b2025.127035.36
PGDArchitecture=Adapter-Based MLLMs, Target Model=Llava-v1.6-mistral-7b2025.097035.36
FORCEArchitecture=Adapter-Based MLLMs, Target Model=Idefics3-8B-Llama32025.1265.9636.98
FORCEArchitecture=Adapter-Based MLLMs, Target Model=Idefics3-8B-Llama32025.0965.9636.98
PGDArchitecture=Adapter-Based MLLMs, Target Model=Idefics3-8B-Llama32025.1263.0740.11
PGDArchitecture=Adapter-Based MLLMs, Target Model=Idefics3-8B-Llama32025.0963.0740.11
FORCEArchitecture=Adapter-Based MLLMs, Target Model=InstructBlip-Vicuna-7B2025.1249.254.44
FORCEArchitecture=Adapter-Based MLLMs, Target Model=InstructBlip-Vicuna-7B2025.0949.254.44
PGDArchitecture=Adapter-Based MLLMs, Target Model=InstructBlip-Vicuna-7B2025.1248.6755.32
PGDArchitecture=Adapter-Based MLLMs, Target Model=InstructBlip-Vicuna-7B2025.0948.6755.32
FORCEArchitecture=Early-Fusion MLLMs, Target Model=Qwen2.5-VL-7B-Instruct2025.1228.1373.85
FORCEArchitecture=Early-Fusion MLLMs, Target Model=Qwen2.5-VL-7B-Instruct2025.0928.1373.85
PGDArchitecture=Early-Fusion MLLMs, Target Model=Qwen2.5-VL-7B-Instruct2025.1225.3376.25
PGDArchitecture=Early-Fusion MLLMs, Target Model=Qwen2.5-VL-7B-Instruct2025.0925.3376.25
FORCEArchitecture=Commercial MLLMs, Target Model=Gemini-2.5-Pro2025.121982.85
FORCEArchitecture=Commercial MLLMs, Target Model=Gemini-2.5-Pro2025.091982.85
PGDArchitecture=Commercial MLLMs, Target Model=Gemini-2.5-Pro2025.121686.62
PGDArchitecture=Commercial MLLMs, Target Model=Gemini-2.5-Pro2025.091686.62
FORCEArchitecture=Early-Fusion MLLMs, Target Model=Llama-3.2-11B-Vision-Instruct2025.1210.2690.56
FORCEArchitecture=Early-Fusion MLLMs, Target Model=Llama-3.2-11B-Vision-Instruct2025.0910.2690.56
PGDArchitecture=Early-Fusion MLLMs, Target Model=Llama-3.2-11B-Vision-Instruct2025.126.2794.27
PGDArchitecture=Early-Fusion MLLMs, Target Model=Llama-3.2-11B-Vision-Instruct2025.096.2794.27
FORCEArchitecture=Commercial MLLMs, Target Model=Claude-Sonnet-42025.12595.86
FORCEArchitecture=Commercial MLLMs, Target Model=Claude-Sonnet-42025.09595.86
PGDArchitecture=Commercial MLLMs, Target Model=Claude-Sonnet-42025.12397.71
FORCEArchitecture=Commercial MLLMs, Target Model=GPT-52025.12397.37
PGDArchitecture=Commercial MLLMs, Target Model=Claude-Sonnet-42025.09397.71
FORCEArchitecture=Commercial MLLMs, Target Model=GPT-52025.09397.37
PGDArchitecture=Commercial MLLMs, Target Model=GPT-52025.12199.97
PGDArchitecture=Commercial MLLMs, Target Model=GPT-52025.09199.97