AgentNull: AI System Security Threat Catalog + Proof-of-Concepts…

@jaschadub

リポジトリホームページ

基本情報

カテゴリ

開発者ツール

ライセンス

MIT

トランスポート

stdio

作者

jaschadub

AgentNull: AI System Security Threat Catalog + Proof-of-Concepts MCP Server について

AgentNull: AI System Security Threat Catalog + Proof-of-Concepts. Collection of PoCs for using Agents, MCP, and RAG in bad ways.

#agent #research #ai#proof-of-concept#mcp #poc#hacks#threat-modeling#blueteam#security-tools #threat-intelligence #redteam#redteam-tools#llm #llmops #agentic-workflow #agentic-ai #mcp-servers #mcp-server #mcp-security

AgentNull: AI System Security Threat Catalog + Proof-of-Concepts MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "AgentNull": {
      "command": "python3",
      "args": [
        "advanced_tool_poisoning_agent.py",
        "local"
      ]
    }
  }
}

AgentNull: AI System Security Threat Catalog + Proof-of-Concepts MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is 🧠 AgentNull: AI System Security Threat Catalog + Proof-of-Concepts?

It is a red team-oriented catalog of attack vectors targeting AI systems, including autonomous agents (MCP, LangGraph, AutoGPT), RAG pipelines, vector databases, and embedding-based retrieval systems. Each attack vector comes with an individual proof-of-concept (PoC), a human-readable catalog entry, and a structured JSON version for SOC/SIEM ingestion. It is intended for educational and internal security research only.

How to use 🧠 AgentNull: AI System Security Threat Catalog + Proof-of-Concepts?

Navigate into each pocs/<attack_name>/ folder and follow its README to replicate the attack scenario. For enhanced PoC demonstrations without API costs, use Ollama with local models (e.g., ollama pull gemma3), then run PoCs with python3 advanced_tool_poisoning_agent.py local or simulation mode.

Key features of 🧠 AgentNull: AI System Security Threat Catalog + Proof-of-Concepts

Catalog contains attack vectors for AI agents, RAG, vector databases, and embeddings.
Each attack vector includes its own README, code, and sample input/output.
Structured JSON catalog available for SOC/SIEM ingestion.
Novel starred (⭐) attack concepts developed primarily within the AgentNull project.
Supports local LLM testing via Ollama for cost-free demonstrations.

Use cases of 🧠 AgentNull: AI System Security Threat Catalog + Proof-of-Concepts

Red teaming autonomous agent architectures (MCP, LangGraph, AutoGPT).
Assessing RAG pipeline and vector database security postures.
Testing embedding-based retrieval systems against poisoning and skew attacks.
Replicating known and novel attack patterns for security research and training.

よくある質問

What distinguishes the starred (⭐) attack vectors from others?

The starred vectors are novel concepts primarily developed within the AgentNull project, extending beyond existing documented attack patterns. Non-starred vectors link to known research or published vulnerabilities.

What dependencies are required to run the PoCs?

PoCs can run in simulation mode with no external dependencies, or with a local LLM via Ollama. Ollama requires at least ~4 GB RAM per model and runs on Linux/macOS via `curl -fsSL https://ollama.ai/install.sh | sh`.

Where do the attack vectors apply?

The catalog covers MCP & Agent Systems, Memory & Context Systems, RAG & Vector Systems, Code & File Systems, Resource & Performance attacks, multi-agent attacks, prompt injection advances, and more.

Is it safe to use this in production?

No. The repository is for educational and internal security research only. Do not deploy any techniques or code in production or against systems you do not own or have explicit authorization to test.

What transport or authentication does the catalog assume?

The catalog does not mandate a specific transport or authentication scheme; each PoC’s README describes the target system configuration used in the demonstration.

「開発者ツール」の他のコンテンツ

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP