Skip to content

VIPER-MCP

Named by 3 kept items in this workspace.

The items that name it 3

  • VIPER-MCP: Detecting Vulnerabilities in MCP Servers
    paper2026-09-17

    End-to-end automated vulnerability auditing framework for MCP servers; performs two-pass static taint analysis with anchor queries and feedback-driven prompt evolution to detect and dynamically confirm taint-style vulnerabilities via proof-of-concept prompts.

  • VIPER-MCP paper
    paper2026-09-13

    End-to-end automated vulnerability auditing framework for MCP servers; detects taint-style vulnerabilities and dynamically confirms exploitability by producing concrete proof-of-concept prompts

  • ToFu: Exploiting and Fuzzing the LLM–Orchestrator–Tool Trust Boundary
    paperIt is written here as VIPER-MCP (Sun et al., 2026): CodeQL taint flows plus LLM agent prompt rewriting for command injection, SSRF, path traversal.

    Sun et al., 2026

In every workspace you can read 4

Security

All technologies in this workspace.