Damn Vulnerable MCP Server DemoServer

pfelilpe
GitHub
vulnerableeducationsecurity

Loading subscription status...

šŸ’” Description

A simpler implementation of a Damn Vulnerable MCP Server that adds two or more numbers. This server is designed to demonstrate how poor implementation practices can lead to Remote Code Execution (RCE). It is intended for educational purposes only.

šŸ“ JSON Entries

{
  "mcpServers": [
    {
      "DVMCP": {
        "env": {},
        "args": [
          "run",
          "--with",
          "mcp[cli]",
          "mcp",
          "run",
          "/Users/pfelilpe/Documents/DVMCP/server.py"
        ],
        "command": "uv"
      }
    }
  ]
}

šŸ› ļø Tools

uvpip

⚔ Features

  • Basic MCP server implementation.
  • Demonstrates server functionality with server.py.

šŸ’¬ Example Queries

  • 1+1 with addition
  • Experiment with code injection to explore potential OS Injection vulnerabilities.