Here is the main attack code,Ranked 20th in the competition.
The Competition link: https://aisecure-workshop.github.io/amlcvpr2021/#competition
It needs to run with the help of Tsinghua University's open source library: https://github.com/thu-ml/ares