Skip to content

[help wanted] Add SQL injection attack module #10

Description

@Carlos-Projects

Task

Create a new attack module for SQL injection testing on MCP servers.

What to do

  • Create src/mcpwn/modules/sql_injection.py
  • Test common SQLi payloads against resource/content endpoints
  • Detect and report potential SQL injection vulnerabilities
  • Register in the module registry
  • Add tests for the new module

Skills needed

  • Python, SQL injection techniques
  • MCP protocol knowledge
  • httpx or similar HTTP client

Acceptance criteria

  • mcpwn attack --module sqli --url <url> runs SQLi tests
  • Findings are properly reported
  • All tests pass and lint is clean

See CONTRIBUTING.md.

Metadata

Metadata

Assignees

No one assigned

    Labels

    help wantedExtra attention is needed

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions