x=hub

your toolset

    build deployment
    sign in

    vulnerable-mcp-servers-lab

    projectother official scanned
    io.github.appsecco/vulnerable-mcp-servers-lab · v
    deploy just this

    A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

    run it

    nothing to build
    No DockerfileThe worker built github.com/appsecco/vulnerable-mcp-servers-lab for v on 2026-10-17 and found no Dockerfile, so there is nothing to build until a new version arrives. Its source is at github.com/appsecco/vulnerable-mcp-servers-lab.

    connect to it

    copy what your client needs
    {
  "mcpServers": {
    "vulnerable-mcp-servers-lab": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add vulnerable-mcp-servers-lab -- CHANGE_ME

    {
  "mcpServers": {
    "vulnerable-mcp-servers-lab": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    {
  "servers": {
    "vulnerable-mcp-servers-lab": {
      "type": "stdio",
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.appsecco/vulnerable-mcp-servers-lab
    • not probed yet: tools unpinned, ingest lists them
    • nothing to build: the worker found no Dockerfile in github.com/appsecco/vulnerable-mcp-servers-lab on v; build it by hand

    tools

    Probe result: faileddocker: no MCP server found (:8000/mcp: no tool listing within 90 s; :8000/: HTTP 404: MCPError: Not Found) internal/event_target:762:26) { code: 'CONNECTION_CLOSED', data: undefined } [supergateway] Child non-JSON: ✅ Injection Demo MCP Server (HTTP+SSE) listening on <ip> [supergateway] Child non-JSON: BASE_PATH: "" [supergateway] Child non-JSON: Direct access: http://<host>/mcp

    runs · 2

    the latest tests of this entry by the hub and its workers, newest first
    dateworkermethodstatussandboxreason
    2026-10-17 12:47 local-mac-vm docker failed gvisor docker: no MCP server found (:8000/mcp: no tool listing within 90 s; :8000/: HTTP 404: MCPError: Not Found) internal/event_target:762:26) { code: 'CONNECTION_CL…
    2026-10-17 12:31 local-mac-vm docker failed gvisor docker: sandbox: docker build: ERROR: failed to build: failed to solve: failed to read dockerfile: open Dockerfile: no such file or directory