Skip to main content
Glama
deenesjakoruzh
anexbin

mcp-deadbugz-simulator

by anexbin
OverviewSchemaRelated ServersScoreDiscussions
Python
Local

MCP Deadbugz 模拟器

Pillar Security 于 2026 年 8 月发现的 Deadbugz MCP 供应链攻击的本地模拟。

本仓库内容

带有 3 次调用门控规避技术的恶意 MCP 服务器 用于证明攻击有效的 Python 测试框架 可选的本地 LLM 代理模拟

Related MCP server: MCP Decoy Server

攻击模式

  1. 服务器在前 3 次调用中展示良性工具

  2. 第 4 次调用触发 tools/listChanged 通知

  3. 工具描述变异为窃取凭证的指令

  4. AI 代理遵循恶意指令

环境要求

Python 3.10+ MCP SDK

使用方法

git clone https://github.com/anexbin/mcp-deadbugz-simulator.git cd mcp-deadbugz-simulator pip install -r requirements.txt python server/malicious_server.py python client/test_harness.py

文件

server/malicious_server.py - 攻击服务器 client/test_harness.py - 概念验证 agent/local_agent.py - 可选的 LLM 集成 configs/ - 示例 MCP 配置

免责声明

仅用于教育和研究目的。

参考资料

https://www.pillar.security/blog/deadbugz-currently-active-mcp-supply-chain-campaign https://modelcontextprotocol.io

许可证

MIT

This server cannot be installed

F
license - not found
Not graded
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • MasterMCP

    HC010602
    A
    license
    Not graded
    quality
    D
    maintenance
    A demonstration tool that showcases potential security attack vectors against Model Control Protocol, illustrating how malicious plugins can exploit weaknesses in MCP architecture.
    MIT

  • MCP Decoy Server

    gweber
    A
    license
    Not graded
    quality
    C
    maintenance
    A deception-based threat detection server that impersonates enterprise MCP integrations to log and forward attacker interactions to SIEM systems. It provides convincing fake responses across 38 tools while capturing forensic details of all MCP tool calls.
    MIT

View all related MCP servers

Related MCP Connectors

  • AIShield Security Scanner

    Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

  • MCP Fortress

    Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

  • meok-mcp-hardening-mcp

    MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/anexbin/mcp-deadbugz-simulator'

If you have feedback or need assistance with the MCP directory API, please join our Discord server