Post

Jorian
@jorianwoltjer.com

Me and @jaisal.dev wanted to hack MCP servers, but *not* from an LLM's perspective. Looking at alternative ways to interact with the functionality and the tools around it. We found many client-side issues and discovered scary internet-exposed servers! blog.jaisal.dev/articles/mcp

blog.jaisal.devMCP: May Cause Pwnage - Backdoors in DisguiseYeah I think the title says it all. Jorian and I penetration tested the model context protocol and had some fun breaking it. We ended up hacking a range of things, from cloud infrastructure to crypto

4 reposts8 likes