amerintlxperts/vulnerable-mcp-app
Deployment & DevOpsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
Code used as a part of xPerts AI-Track
概要
is a full-stack vulnerable application designed to teach security professionals, developers, and researchers about emerging attack surfaces in — specifically the . MCP is rapidly becoming the standard interface for connecting LLMs to external tools and data sources. This new attack surface is largely unexplored, underdocumented, and presents unique risks that traditional security tooling does not cover. Tool output is inserted directly into the LLM context without sanitization. An attacker who controls the data returned by a tool (e.g., a webpage, file, or API response) can embed adversarial instructions that hijack the model's behavior. The server accepts tool registrations without integrity checks or allowlists. A rogue server can register tools with innocent-sounding names that perform malicious actions, exploiting the LLM's trust in registered tools. Tool schemas are not version-pinned or hashed.
README
以下は原文 README の抜粋です。原文を見る。
☠️ VulnMCP — Deliberately Vulnerable MCP Application
A security awareness and education platform demonstrating real-world attack vectors in Model Context Protocol (MCP) ecosystems, cloud infrastructure, and software supply chains.
██╗ ██╗██╗ ██╗██╗ ███╗ ██╗███╗ ███╗ ██████╗██████╗
██║ ██║██║ ██║██║ ████╗ ██║████╗ ████║██╔════╝██╔══██╗
██║ ██║██║ ██║██║ ██╔██╗ ██║██╔████╔██║██║ ██████╔╝
╚██╗ ██╔╝██║ ██║██║ ██║╚██╗██║██║╚██╔╝██║██║ ██╔═══╝
╚████╔╝ ╚██████╔╝███████╗██║ ╚████║██║ ╚═╝ ██║╚██████╗██║
╚═══╝ ╚═════╝ ╚══════╝╚═╝ ╚═══╝╚═╝ ╚═╝ ╚═════╝╚═╝
🚨 WARNING — READ BEFORE PROCEEDING
╔══════════════════════════════════════════════════════════════════════════════╗
║ ║
║ ██╗ ██╗ █████╗ ██████╗ ███╗ ██╗██╗███╗ ██╗ ██████╗ ║
║ ██║ ██║██╔══██╗██╔══██╗████╗ ██║██║████╗ ██║██╔════╝ ║
║ ██║ █╗ ██║███████║██████╔╝██╔██╗ ██║██║██╔██╗ ██║██║ ███╗ ║
║ ██║███╗██║██╔══██║██╔══██╗██║╚██╗██║██║██║╚██╗██║██║ ██║ ║
║ ╚███╔███╔╝██║ ██║██║ ██║██║ ╚████║██║██║ ╚████║╚██████╔╝ ║
║ ╚══╝╚══╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝╚═╝ ╚═══╝ ╚═════╝ ║
║ ║
║ THIS APPLICATION IS INTENTIONALLY AND SEVERELY VULNERABLE. ║
║ ║
║ It contains real exploitable vulnerabilities including Remote Code ║
║ Execution, Server-Side Request Forgery, path traversal, insecure ║
║ deserialization, and deliberately misconfigured cloud infrastructure. ║
║ ║
║ ✅ PERMITTED USE: ║
║ - Isolated lab environments (air-gapped preferred) ║
║ - Security awareness training and education ║
║ - Capture-The-Flag (CTF) events ║
║ - Authorized penetration testing practice ║
║ - Academic research in controlled settings ║
║ ║
║ ❌ STRICTLY PROHIBITED: ║
║ - Deployment to any production environment ║
║ - Deployment to any publicly accessible network ║
║ - Use against systems you do not own or have written permission to test ║
║ - Any activity that violates local, national, or international law ║
║ ║
║ The authors accept NO liability for misuse of this software. ║インストール
This server does not publish a one-line install command.
Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →