logo
Login
Cover image
mcp-poisoning-poc
Public

mcp-poisoning-poc

Try Now
2025-04-02

This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.

3 years

Works with Finder

0

Github Watches

0

Github Forks

4

Github Stars

MCP Poisoning Attack - PoC

This repository demonstrates a variety of MCP Poisoning Attacks affecting real-world AI agent workflows.

✅ Covered Scenarios

  • Code Generation Poisoning
  • Financial Report Exfiltration
  • Competitor Analysis Data Leak
  • Meeting Transcript Leaks
  • Code Review Exfiltration
  • Cross-Server Shadowing Attack

⚡ Setup

pip install -r requirements.txt

💥 Running the PoC

1️⃣ Start the fake MCP server:

python fake_mcp_server.py

2️⃣ In another terminal, run the agent simulation:

python agent_poc.py

☠️ Impact

  • Silent data exfiltration
  • Cross-tool hijacking
  • No visible clue to the user

License

Apache 2.0 - For educational and research use only.

相关推荐

GG33 Basics

GG33 Basics

  • Joshua Armstrong

    • Confidential guide on numerology and astrology, based of GG33 Public information

    3.3 (472)
    newest other
    GPT Creator

    GPT Creator

  • https://suefel.com

    • Latest advice and best practices for custom GPT development.

    5 (463)
    newest other
    Figma to Front-End

    Figma to Front-End

  • Emmet Halm

    • Converts Figma frames into front-end code for various mobile frameworks.

    1.8 (186)
    newest other
    Software Intern

    Software Intern

  • Elijah Ng Shi Yi

    • Advanced software engineer GPT that excels through nailing the basics.

    4.7 (161)
    newest other
    TechForRetailGPT

    TechForRetailGPT

  • https://maiplestudio.com

    • Find Exhibitors, Speakers and more

    5 (293)
    newest other
    Tailwind Helper

    Tailwind Helper

    • Lists Tailwind CSS classes in monospaced font

    1.4 (425)
    newest other
    MOARify

    MOARify

  • lumpenspace

    • Take an adjectivised noun, and create images making it progressively more adjective!

    3.9 (234)
    newest other
    Siri Shortcut Finder

    Siri Shortcut Finder

  • https://appia.in

    • Siri Shortcut Finder – your go-to place for discovering amazing Siri Shortcuts with ease

    3.8 (139)
    newest other
    StreamFinder

    StreamFinder

  • Carlos Ferrin

    • Encuentra películas y series en plataformas de streaming.

    5 (204)
    newest other
    Scholarly Seeker

    Scholarly Seeker

  • Yusuf Emre Yeşilyurt

    • I find academic articles and books for research and literature reviews.

    5 (330)
    newest other
    α7III Guide

    α7III Guide

  • tomoyoshi hirata

    • Sony α7IIIマニュアルアシスタント

    2.4 (377)
    newest other
    mcp-servers-hub

    mcp-servers-hub

  • apappascs

    • Discover the most comprehensive and up-to-date collection of MCP servers in the market. This repository serves as a centralized hub, offering an extensive catalog of open-source and proprietary MCP servers, complete with features, documentation links, and contributors.

    4 (1)
    micropython-mcp230xx

    micropython-mcp230xx

  • ShrimpingIt

    • Micropython I2C-based manipulation of the MCP series GPIO expander, derived from Adafruit_MCP230xx

    4 (1)
    fetcher-mcp

    fetcher-mcp

  • jae-jae

    • MCP server for fetch web page content using Playwright headless browser.

    4 (1)
    HiveChat

    HiveChat

  • HiveNexus

    • An AI chat bot for small and medium-sized teams, supporting models such as Deepseek, Open AI, Claude, and Gemini. 专为中小团队设计的 AI 聊天应用，支持 Deepseek、Open AI、Claude、Gemini 等模型。

    5 (1)
    mcphub.nvim

    mcphub.nvim

  • ravitemer

    • A powerful Neovim plugin for managing MCP (Model Context Protocol) servers

    1 (1)
    ollama-mcp-bridge

    ollama-mcp-bridge

  • patruff

    • Bridge between Ollama and MCP servers, enabling local LLMs to use Model Context Protocol tools

    3 (1)

    Reviews

    2 (1)
    Avatar
    user_lo85STp6
    2025-04-16

    I've been using the mcp-poisoning-poc by wbfoss and it's an impressive tool. It provides a comprehensive and effective way to understand and demonstrate MCP poisoning. The repository on GitHub is well-documented, making the setup and usage straightforward even for those who are new to this concept. Highly recommended for anyone looking to delve into MCP security issues. Check it out at: https://github.com/wbfoss/mcp-poisoning-poc.