amerintlxperts/vulnerable-mcp-app
Deployment & DevOpsЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
Code used as a part of xPerts AI-Track
Обзор
is a full-stack vulnerable application designed to teach security professionals, developers, and researchers about emerging attack surfaces in — specifically the . MCP is rapidly becoming the standard interface for connecting LLMs to external tools and data sources. This new attack surface is largely unexplored, underdocumented, and presents unique risks that traditional security tooling does not cover. Tool output is inserted directly into the LLM context without sanitization. An attacker who controls the data returned by a tool (e.g., a webpage, file, or API response) can embed adversarial instructions that hijack the model's behavior. The server accepts tool registrations without integrity checks or allowlists. A rogue server can register tools with innocent-sounding names that perform malicious actions, exploiting the LLM's trust in registered tools. Tool schemas are not version-pinned or hashed.
README
Показан фрагмент оригинального README. Открыть оригинал.
☠️ VulnMCP — Deliberately Vulnerable MCP Application
A security awareness and education platform demonstrating real-world attack vectors in Model Context Protocol (MCP) ecosystems, cloud infrastructure, and software supply chains.
██╗ ██╗██╗ ██╗██╗ ███╗ ██╗███╗ ███╗ ██████╗██████╗
██║ ██║██║ ██║██║ ████╗ ██║████╗ ████║██╔════╝██╔══██╗
██║ ██║██║ ██║██║ ██╔██╗ ██║██╔████╔██║██║ ██████╔╝
╚██╗ ██╔╝██║ ██║██║ ██║╚██╗██║██║╚██╔╝██║██║ ██╔═══╝
╚████╔╝ ╚██████╔╝███████╗██║ ╚████║██║ ╚═╝ ██║╚██████╗██║
╚═══╝ ╚═════╝ ╚══════╝╚═╝ ╚═══╝╚═╝ ╚═╝ ╚═════╝╚═╝
🚨 WARNING — READ BEFORE PROCEEDING
╔══════════════════════════════════════════════════════════════════════════════╗
║ ║
║ ██╗ ██╗ █████╗ ██████╗ ███╗ ██╗██╗███╗ ██╗ ██████╗ ║
║ ██║ ██║██╔══██╗██╔══██╗████╗ ██║██║████╗ ██║██╔════╝ ║
║ ██║ █╗ ██║███████║██████╔╝██╔██╗ ██║██║██╔██╗ ██║██║ ███╗ ║
║ ██║███╗██║██╔══██║██╔══██╗██║╚██╗██║██║██║╚██╗██║██║ ██║ ║
║ ╚███╔███╔╝██║ ██║██║ ██║██║ ╚████║██║██║ ╚████║╚██████╔╝ ║
║ ╚══╝╚══╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═══╝╚═╝╚═╝ ╚═══╝ ╚═════╝ ║
║ ║
║ THIS APPLICATION IS INTENTIONALLY AND SEVERELY VULNERABLE. ║
║ ║
║ It contains real exploitable vulnerabilities including Remote Code ║
║ Execution, Server-Side Request Forgery, path traversal, insecure ║
║ deserialization, and deliberately misconfigured cloud infrastructure. ║
║ ║
║ ✅ PERMITTED USE: ║
║ - Isolated lab environments (air-gapped preferred) ║
║ - Security awareness training and education ║
║ - Capture-The-Flag (CTF) events ║
║ - Authorized penetration testing practice ║
║ - Academic research in controlled settings ║
║ ║
║ ❌ STRICTLY PROHIBITED: ║
║ - Deployment to any production environment ║
║ - Deployment to any publicly accessible network ║
║ - Use against systems you do not own or have written permission to test ║
║ - Any activity that violates local, national, or international law ║
║ ║
║ The authors accept NO liability for misuse of this software. ║Установка
This server does not publish a one-line install command.
Open the repository installation guide Новичок в MCP? Начните с руководства на mcpskill.org →