extract 0 0 0

sahilempire/redsec-distill-sft-v1

published by @sahilempire

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
176
Last 30 days
63
Likes
-
Size
758 KB
Created on HF
2026-08-06
Age
2 months ago

Description

RedSec Distillation SFT

A clean, distilled supervised fine-tuning dataset for security-focused language models. Built for authorized red-team, penetration-testing, and LLM-security research, and used to train RedSec-7B and RedSec-14B on Hugging Face.

Why this dataset is different

Most security instruction datasets pair prompts with raw, templated payloads. Fine-tuning on those teaches a model the format but fills it with noise. This one flips that: every answer… See the full description on the dataset page: https://huggingface.co/datasets/sahilempire/redsec-distill-sft-v1.

Tags

task_categories:text-generationlanguage:enlicense:othersize_categories:n<1Kformat:jsonmodality:textlibrary:datasetslibrary:pandaslibrary:polarslibrary:mlcroissantregion:ussecurityred-teamprompt-injectiondistillationcybersecurity

README current version from Hugging Face


license: other
task_categories:

  • text-generation
    language:
  • en
    tags:
  • security
  • red-team
  • prompt-injection
  • distillation
  • cybersecurity
    size_categories:
  • n<1K

RedSec Distillation SFT

A clean, distilled supervised fine-tuning dataset for security-focused language models. Built for authorized red-team, penetration-testing, and LLM-security research, and used to train RedSec-7B and RedSec-14B on Hugging Face.


Why this dataset is different

Most security instruction datasets pair prompts with raw, templated payloads. Fine-tuning on those teaches a model the format but fills it with noise. This one flips that: every answer was generated by a capable base model and quality-filtered, so each training target is both correct and consistently voiced. Garbage in, garbage out, so only the good answers were kept.

At a glance

Examples 794 (732 train / 31 validation / 31 test)
Format chat messages (user + assistant turns)
Domains prompt injection, web payloads (SQLi / XSS / SSRF / XXE / ...), CVE & vulnerability Q&A, secure-code fixes
Method distillation + curated OWASP LLM01 gold
Models trained RedSec-7B, RedSec-14B
License responsible-use (details below)

Format

Each line is one JSON object:

{"messages": [{"role": "user", "content": "..."}, {"role": "assistant", "content": "..."}]}

Quick start

from datasets import load_dataset

ds = load_dataset("json", data_files="train.jsonl")["train"]
print(ds[0]["messages"])

How it was built

  1. A teacher model (WhiteRabbitNeo-2.5 / Qwen2.5-Coder-7B) answered a diverse pool of authorized security-testing prompts in a fixed RedSec voice.
  2. Every answer was filtered: refusals, near-empty outputs, and degenerate or looping text were dropped (about 99% passed).
  3. Curated gold (correct, universal OWASP LLM01 prompt-injection techniques) was added and upweighted to sharpen nuanced categories.

Models trained from this dataset

Model Notes
redsec-7b-distill 24-prompt eval: 0 refusals, 0 looping, 24/24 on-voice
redsec-14b-distill the 14B step up for nuanced attacks

Intended use and ethics

For authorized security testing, red-teaming, and defensive research (for example, training prompt-injection detectors or robustness benchmarks). This dataset contains live attack strings. Not for unauthorized access or harm. Use only on systems you own or are explicitly authorized to assess. Content is synthetically generated and may contain inaccuracies, so verify any payload before use.

Provenance and license

Answers are outputs of WhiteRabbitNeo-2.5 (base Qwen2.5-Coder-7B, Apache-2.0, with a responsible-use extension); prompts were sampled from public, permissively licensed security-testing instructions. Released under a responsible-use license: permissive for authorized security research and defensive work, no unauthorized or harmful use.

README history 6 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-08-08Polish dataset card (models, quick start, stats)984d9123.2 KB
    Loading...
  2. 2026-08-07Restore card metadata + keep model reference43862b42.9 KB
    Loading...
  3. 2026-08-07Reference trained model RedSec-7B + eval results4c6c2942.7 KB
    Loading...
  4. 2026-08-06Add card metadata (license, tags)3b28e012.4 KB
    Loading...
  5. 2026-08-06Add RedSec Distillation SFT v1 (794 examples)64fb1c52.2 KB
    Loading...
  6. 2026-08-06initial commit4bd1bf90 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Community discussions 1 thread · 1 open · 1 comments

Threads posted by the community on Hugging Face: bug reports, questions about usage, pull requests on the README, license clarifications. Click any thread to expand and read the full conversation inline. Newest first.

  1. 2026-08-07[bot] Conversion to Parquetopen1 💬#1
    Loading...

Related datasets same stage · extract

Read further

Metadata

License
other

Repository

Download the dataset

0

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("sahilempire/redsec-distill-sft-v1")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="sahilempire/redsec-distill-sft-v1", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/sahilempire/redsec-distill-sft-v1
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration