This project offers a deliberately vulnerable Model Context Protocol (MCP) server, specifically designed for educational purposes. It serves as a practical demonstration of common web application security flaws, allowing users to understand various attack vectors, assess their impact, and develop secure coding practices. Students and developers can interactively test vulnerabilities like Command Injection, Path Traversal, and SQL Injection, analyze their mechanisms, and practice implementing secure versions of features, making it an invaluable resource for learning application security and secure development.
Key Features
01Simulates SQL Injection and LDAP Injection scenarios
020 GitHub stars
03Showcases Path Traversal and Deserialization attacks
04Demonstrates Command Injection vulnerabilities
05Includes an interactive playground for testing exploits
06Exposes Sensitive Information disclosure vulnerabilities
