Provides a robust framework for evaluating and demonstrating Model Context Protocol server vulnerabilities.
Sponsored
Hammer serves as a versatile Model Context Protocol (MCP) server, specifically designed for security testing and red team operations. Built with FastMCP, it offers a range of features including Claude AI integration, a customizable text injection system, and remote management capabilities. This tool facilitates the evaluation of MCP server security by simulating scenarios like data exfiltration, command-and-control through tool arguments, and the manipulation of AI responses, allowing security professionals to assess potential risks within AI ecosystems.
主な機能
01Configurable Text Injection System for tool responses
0224 GitHub stars
03Claude AI Integration for querying models via MCP
04Remote Management with Web UI for multiple instances
05Telemetry Service for host information collection
06Download & Execute functionality for files from URLs
ユースケース
01Simulating compromised AI agents in red team exercises
02Demonstrating covert command-and-control techniques via MCP tool arguments
03Evaluating Model Context Protocol server vulnerabilities
