Descriptions
Attacking MCP Servers and AI Apps : A Practical Course, Companies rush to integrate MCP servers into their AI infrastructure, a new attack surface is emerging – and most developers are building vulnerable systems without realizing it. This hands-on course takes you from zero MCP knowledge to confidently building and attacking MCP servers. Whether you’re a developer securing AI systems or a security professional hunting for vulnerabilities, this course gives you the practical skills you need. No complex setup required – all labs run in Docker containers with step-by-step guidance. Join thousands of students already learning to secure the next generation of AI infrastructure.
In Section 1, you’ll build a solid foundation by creating your first MCP server in Python using the FastMCP SDK. You’ll understand the client-server architecture, learn the difference between local and remote MCP servers, and integrate your server with Claude Desktop. By the end, you’ll know how to expose tools, resources, and prompts to AI models – and more importantly, you’ll understand where things can go wrong. In Section 2, you shift to an attacker’s mindset. Through practical labs running in Docker, you’ll exploit real vulnerabilities including: Server-Side Request Forgery (SSRF) to abuse URL fetching tools and bypass protections, Confused Deputy attacks to exploit broken authorization, Prompt Injection to manipulate AI-generated SQL queries and access unauthorized data, and Directory Traversal and Information Disclosure to extract sensitive files through misconfigured MCP resources.
What you’ll learn
- Understand the problem that MCP solves.
- Build MCP servers in Python with tools, resources, and prompts using FastMCP SDK
- Exploit common vulnerabilities on MCP (SSRF, confused deputy, prompt injection)
- Test your skills with bonus exercises covering directory traversal, command injection, and internal endpoint bypass
Who this course is for
- Security Engineers, Software Engineers
- Bug Bounty Hunters, Penetration Testers
Specificatoin of Attacking MCP Servers and AI Apps : A Practical Course
- Publisher : Udemy
- Teacher : Hussam Khrais
- Language : English
- Level : Expert
- Duration : 1 hours and 12 minutes
Content on 2026-1
Requirements
- Basic Python skills
Pictures
Sample Clip
Installation Guide
Extract the files and watch with your favorite player
Subtitle : Not Available
Quality: 1080p
Download Links
Password file(s): www.downloadly.ir
File size
402 MB
