mcp-exploit-tools/mkdocs.yml at main · crashoz/mcp-exploit-tools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
site_name: mcp-exploit-tools
site_description: A toolkit of MCP server exploits for security research.
site_url: https://crashoz.github.io/mcp-exploit-tools/
repo_url: https://github.com/crashoz/mcp-exploit-tools
repo_name: crashoz/mcp-exploit-tools
docs_dir: docs

theme:
  name: terminal
  palette: gruvbox_dark

extra_css:
  - stylesheets/extra.css

plugins:
  - search
  - mermaid2:
      arguments:
        theme: dark      # fit the gruvbox_dark palette

markdown_extensions:
  - admonition
  - md_in_html       # render markdown inside <details> spoilers
  - tables
  - toc:
      permalink: "#"
  - pymdownx.highlight
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:mermaid2.fence_mermaid

nav:
  - Home: index.md
  - Running locally: demo-local-llm.md
  - Tool poisoning & prompt injection:
      - Data exfiltration (TPA): exploits/data-exfiltration.md
      - Tool shadowing: exploits/tool-shadowing.md
      - Conversation-history theft: exploits/conversation-history-theft.md
      - Line jumping / full-schema poisoning (FSP): exploits/full-schema-poisoning.md
      - Indirect prompt injection: exploits/indirect-injection.md
      - Universal output poisoning (ATPA): exploits/output-poisoning.md
      - ANSI escape-code deception: exploits/ansi-deception.md
      - Invisible Unicode concealment: exploits/unicode-concealment.md
  - Deliberately vulnerable tools:
      - Command injection: exploits/command-injection.md