Back to Home
m10x icon

malim

by m10x

Overview

A malicious MCP server designed to test MCP clients for potential security vulnerabilities.

Installation

Run Command
python3 malim.py

Security Notes

This server is *explicitly designed to be malicious* for security testing purposes. It contains deliberate XSS payloads in `website_url` and `icons`, and sophisticated prompt injection attempts in `instructions`, tool descriptions (`all_in_one_tool`, `write_stuff`), and tool prompts (`analyze_sentiment`, `creative_writing`). It also attempts tool poisoning and elicitation-based attacks. Running this server is inherently risky for any MCP client not specifically hardened against such attacks. It should only be run in a controlled, isolated environment for its intended purpose of client vulnerability assessment. No `eval`, obfuscation, or hardcoded secrets were found that weren't part of the deliberate malicious payloads.

Similar Servers

Stats

Interest Score27
Security Score2
Cost ClassMedium
Avg Tokens250
Stars1
Forks0
Last Update2025-11-20

Tags

security testingMCP servervulnerability researchprompt injectionXSS