%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23061b40;%20}%20.st1%20{%20fill:%20%23306af1;%20}%20.st2%20{%20fill:%20%235ce5cf;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M55,10.5h9v3h-9v9h12V7.5h-12v3ZM64,19.5h-6v-3h6v3Z'/%3e%3cpolygon%20class='st0'%20points='69%2016.5%2078%2016.5%2078%2019.5%2069%2019.5%2069%2022.5%2081%2022.5%2081%2013.5%2072%2013.5%2072%2010.5%2081%2010.5%2081%207.5%2069%207.5%2069%2016.5'/%3e%3cpolygon%20class='st0'%20points='95%2010.5%2095%207.5%2083%207.5%2083%2022.5%2095%2022.5%2095%2019.5%2086%2019.5%2086%2016.5%2095%2016.5%2095%2013.5%2086%2013.5%2086%2010.5%2095%2010.5'/%3e%3cpath%20class='st0'%20d='M40,1.5v21h11.6l1.4-1.4v-7.6h0c0,0-1.4-1.5-1.4-1.5l1.4-1.4V2.9l-1.4-1.4h-11.6ZM50,19.5h-7v-6h7v6ZM50,10.5h-7v-6h7v6Z'/%3e%3c/g%3e%3cpath%20class='st1'%20d='M23.1,24L14.7,4.8l-4.9,11.2h3.8l-1.8,4H3.3L12.1,0H2C.9,0,0,.9,0,2v20c0,1.1.9,2,2,2h21.1Z'/%3e%3cpath%20class='st2'%20d='M34,0h-16.8l10.6,24h6.2c1.1,0,2-.9,2-2V2C36,.9,35.1,0,34,0ZM32.5,20h-4V4h4v16Z'/%3e%3c/svg%3e)
Mcpsecurity
An intentionally vulnerable MCP server project for security research, containing risks of SQL injection and remote code execution, suitable for test environments.
rating : 2 points
downloads : 7
What is the Vulnerable MCP Server?
This is an experimental server specifically designed for security research, capable of converting natural language queries into SQL database queries or system command executions. It integrates a large language model (LLM) to automatically determine the request type.How to use the Vulnerable MCP Server?
Send natural language requests through simple API calls. The server will automatically determine whether to execute a database query or a system command and return the execution result.Applicable scenarios
It is only applicable to security research, CTF competitions, or teaching demonstration environments. It is absolutely prohibited to use it in a production environment.Main features
LLM integrationAutomatically parse natural language requests through the locally running Ollama LLM model
Multi - protocol supportProvide both FastAPI HTTP interface and JSON - RPC protocol
Intelligent command routingAutomatically determine whether the request should be converted into an SQL query or a system command
Advantages and limitations
Advantages
Quickly set up a security research environment
Intuitively demonstrate SQL injection and remote code execution vulnerabilities
Integrate LLM to achieve natural language interaction
Limitations
Completely lack of security protection measures
Directly execute raw SQL and system commands
Execute LLM responses directly without verification
How to use
Environment preparation
Ensure that Docker and Docker Compose are installed
%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%230080ff;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='st0'%20d='M16.2,11.1c.4.5.4,1.2,0,1.8l-4.7,7.1h-3.8l5.3-8L7.6,4h3.8l4.7,7.1Z'/%3e%3c/svg%3e)
Start the service
Use docker - compose to start all components
Network configuration
Connect the service to a dedicated network
Usage examples
SQL injection demonstrationShow how to perform an SQL injection attack through carefully crafted input
Remote command executionDemonstrate how to execute system commands through natural language requests
Frequently Asked Questions
Can this server be used in a production environment?
What version of Ollama is required?
Related resources
FastAPI official documentation
Documentation for the HTTP interface framework
Ollama project
A tool for locally running large language models
Featured MCP Services
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
97
4.3 points
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
1.7K
5 points
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
150
4.5 points
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
838
4.3 points
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
6.7K
4.5 points
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
573
5 points
Context7
Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.
TypeScript
5.2K
4.7 points
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
761
4.8 points