Vulnerable App
Simulate security vulnerabilities within an MCP (Model Context Protocol) environment for research and testing.
About
This project is an intentionally vulnerable MCP application built for security research. It combines FastAPI, SQLite, and Ollama LLM to create a system that routes natural language input to either SQL queries or shell commands. The app is designed to be susceptible to SQL Injection (SQLi) and Remote Code Execution (RCE) vulnerabilities via FastAPI, JSON-RPC, and LLM-based decision logic. It is intended for use in isolated environments, CTFs, or research labs only, and should NEVER be used in production.
Key Features
- LLM-based decision logic for command routing
- Simple, pluggable JSON-RPC methods
- Auto-initializing SQLite database with sample data
- Vulnerable by design for offensive/defensive testing
- Native execution of SQL and terminal commands
- 2 GitHub stars
Use Cases
- Remote Code Execution (RCE) vulnerability testing
- Security research and education
- SQL Injection (SQLi) vulnerability testing
Sponsored