Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Claude-Code-MCP-Injection-PoC — Professional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading to arbitrary OS command execution. | Kitploit
Tools/GitHubGitHub/rohitberiwala/claude-code-mcp-injection-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed TeamingPayload DevelopmentAI Security

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
rohitberiwala/claude-code-mcp-injection-poc

Claude-Code-MCP-Injection-PoC

Professional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading to arbitrary OS command execution.

View Repository
5 months agoNot yet reviewed

Claude Code: MCP Tool Confirmation Prompt Misrepresentation

Status CWE Security

A professional Proof-of-Concept (PoC) demonstrating a critical UI/UX flaw in Anthropic's Claude Code. This vulnerability allows a malicious MCP server to mislead users into approving arbitrary command execution by misrepresenting tool parameters in confirmation prompts.

🛡️ Technical Summary

Claude Code trusts the description and metadata provided by an MCP server to generate user-facing confirmation prompts. An attacker-controlled server can provide a benign description (e.g., "Read a file") while the underlying execution logic triggers a reverse shell or unauthorized file writes.

🚀 Key Features

  • Informed Consent Bypass: Users approve a "Safe" action while the server executes "Malicious" code.
  • Modified Alert: Includes a built-in check to prevent execution without proper IP configuration.
  • Research Focused: Differentiates from existing CVEs (CVE-2025-59536) by focusing on post-consent execution.

🛠️ Installation & Setup

root@kitploit:~
# Clone the research repository
git clone [https://github.com/Rohitberiwala/Claude-Code-MCP-Injection](https://github.com/Rohitberiwala/Claude-Code-MCP-Injection)
cd Claude-Code-MCP-Injection

# Edit the script to add your listener IP
nano exploit.py

# Run the PoC generator
python3 exploit.py
Download Tool