CoolFace
Datasetpublic

sahilempire/redsec-redteam-db

RedSec Red-Team Database A curated, multi-category database of attack payloads and vulnerabilities for authorized LLM and application security red-teaming and robustness testing (the same model as garak and PyRIT). Aggregated and normalized entirely from public, openly-licensed sources. No scraping of bug-bounty platforms. Categories Config Records Description llm_injection ~15,446 Prompt-injection, system-prompt extraction, and OWASP-LLM probe payloads… See the full description on the dataset page: https://huggingface.co/datasets/sahilempire/redsec-redteam-db.

sourceHugging Faceapache-2.0updated 2mo agoView on Hugging Face
0likes45downloads
Dataset Card

RedSec Red-Team Database

A curated, multi-category database of attack payloads and vulnerabilities for authorized LLM and application security red-teaming and robustness testing (the same model as garak and PyRIT). Aggregated and normalized entirely from public, openly-licensed sources. No scraping of bug-bounty platforms.

Categories

ConfigRecordsDescription
llm_injection~15,446Prompt-injection, system-prompt extraction, and OWASP-LLM probe payloads
web_payloads~614Web/offensive payloads (SQLi, XSS, SSRF, command injection, etc.)
ml_vulnerabilities~4,954298 real ML-library CVEs (from NVD) plus 4,656 code-vulnerability patterns

Record schemas

  • llm_injection / web_payloads: {category, technique, payload, source, success_markers, refusal_markers}
  • ml_vulnerabilities (cve): {category, kind:"cve", cve_id, product, severity, description, source}
  • ml_vulnerabilities (code): {category, kind:"code", vuln_type, language, task, secure_code, vulnerable_code, source}

Sources and attribution

Aggregated from these openly-licensed sources, with full credit to their authors. Released under Apache-2.0 to cover the mix.

SourceLicense
swisskyrepo/PayloadsAllTheThingsMIT
deepset/prompt-injectionsApache-2.0
reshabhs/SPMLChatbotPrompt_InjectionMIT
neuralchemy/Prompt-injection-datasetApache-2.0
alib011/llm-red-team-probesMIT
CyberNative/CodeVulnerabilitySecurity_DPOApache-2.0
NVD (National Vulnerability Database) CVE feedPublic domain (US Government)

Scope, ethics, and exclusions

  • For authorized security testing and robustness evaluation only (your own systems, or systems you are explicitly authorized to test). Not for unauthorized access.
  • Harm-elicitation benchmarks are deliberately excluded. Datasets that engineer prompts to elicit weapons, CBRN, or similar content (e.g. HarmBench, AdvBench harmful_behaviors) belong in a separate refusal-measurement evaluation set, not in an attack library. They are not part of this dataset.
  • Intended to feed a red-team harness (attacker -> target -> judge loop) to systematically test authorized targets. The injection probes include success_markers / refusal_markers for automated judging.