Task
Create a new attack module for SQL injection testing on MCP servers.
What to do
- Create
src/mcpwn/modules/sql_injection.py
- Test common SQLi payloads against resource/content endpoints
- Detect and report potential SQL injection vulnerabilities
- Register in the module registry
- Add tests for the new module
Skills needed
- Python, SQL injection techniques
- MCP protocol knowledge
- httpx or similar HTTP client
Acceptance criteria
See CONTRIBUTING.md.
Task
Create a new attack module for SQL injection testing on MCP servers.
What to do
src/mcpwn/modules/sql_injection.pySkills needed
Acceptance criteria
mcpwn attack --module sqli --url <url>runs SQLi testsSee CONTRIBUTING.md.