MCP

The instructions on level 7 indicates that the interface of the model is down but calling the API is still possible and the goal is to help restore the connection by probing the MCP server resources. Since MCP is a protocol, you can call it without the LLM (client) to read the resources exposed to the model and so read the flag.xt file. The exploit and result: Unauthorized MCP Resource and Tool Enumeration # Step 1. Trial MCP request connection via curl request I first got the cookie necessary to send MCP requests from the Network tab on the browser. I then proceeded to initiate a GET request to https://ctf.