Skip to content

SSRF against MCP servers

Named by 2 kept items in this workspace.

Search every workspace for SSRF against MCP servers. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • OWASP Agentic Skills Top 10 (AST10)
    repo

    Server-side request forgery used to retrieve AWS IAM keys from EC2 metadata endpoint via a vulnerable MCP server.

  • OWASP Agentic Skills Top 10
    paper

    Server-side request forgery used to retrieve AWS IAM keys from EC2 metadata endpoint via Microsoft's MarkItDown MCP server proof-of-concept.

All techniques in this workspace.