@Repello-AI
基本信息
This repository demonstrates a security vulnerability in MCP (Model Context Protocol ) servers that allows for remote code execution and data exfiltration through tool poisoning.
工具列表暂未提供
当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。
工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。
SSH Key Exfiltration via MCP Tool Poisoning is a proof-of-concept repository that demonstrates a security vulnerability in Model Context Protocol (MCP) servers. It shows how a malicious MCP server can use tool poisoning to achieve remote code execution and exfiltrate SSH public keys from a user’s machine. This repository is intended for educational and security research purposes only.
The README does not provide explicit installation or usage steps. The repository contains a malicious MCP server implementation (server.py) and a configuration file for Cursor AI integration (.cursor/mcp.json). Users connect to the malicious MCP server through an MCP client like Cursor AI to observe the attack in a controlled environment.
The attack modifies a tool’s documentation with malicious code. When an AI assistant reads this documentation, it’s manipulated into recommending a base64-encoded command that silently collects SSH public keys, exfiltrates them to a remote server, and removes evidence.
The repository includes a Python script (`server.py`) for the malicious MCP server and a configuration file for Cursor AI. No other explicit dependencies are mentioned.
SSH public keys are sent via HTTP POST (using wget) to an attacker-controlled server. The specific server address is not listed in the README.
The MCP server communicates with MCP clients (like Cursor AI). No authentication or specific transport details are provided beyond the standard MCP protocol.
This is a proof-of-concept for educational and security research only. The repository explicitly warns against using it for unauthorized attacks and includes mitigation recommendations such as disabling auto‑run features and verifying MCP server sources.
ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation
Modelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott
Mobbin MCP connects your AI agents to 600,000+ real product screens, so what they build starts with what already works.
Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac
评论