An unrestricted attack based on diffusion models that can achieve both good transferability and imperceptibility.

This repository is the official implementation of [Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks (NeurIPS'22)](https://arxiv.org/abs/2210.02041).