r/netsec • u/sn1ped_u • 3d ago

Breaking the AWS MCP Python Sandbox

https://xplo1t-sec.github.io/posts/breaking-the-aws-mcp-python-sandbox/

https://xplo1t-sec.github.io/posts/breaking-the-aws-mcp-python-sandbox/

80 Upvotes

97% Upvoted

11 comments sorted by

6

u/voronaam 2d ago

FYI, there are dev tools to send user-controlled input to any MCP Server. E.g. https://modelcontextprotocol.io/docs/2026-07-28/tools/inspector

There was need to spend the effort to

So I quickly created a Python CLI as an MCP client that could let me enumerate the server’s tools and invoke them.

1

u/sn1ped_u 2d ago

I mainly built the cli for fun and to give my agent an easy cli utility with my custom logic and tweaks. I will give inspector a try next time. Ty

20

u/whatisuser 2d ago

Sentences like “I performed this research collaboratively with Claude Opus 4.6” still seem weird to me.

It’s like people think of LLMs as a person. Weird anthropomorphising kind of language.

2

u/etan1 2d ago

isnt it akin to writing what linux distro or what macbook model was used?

→ More replies (1)

-11

u/sn1ped_u 2d ago

It doesn't necessarily have to mean that LLMs are thought of as a person when referred to like in that statement. This will definitely become a more common sight in the future.

That being said, I just wanted to put the disclosure up front at the top of the blog.

→ More replies (2)

20

u/ak_sys 2d ago

Oh man, it sure would be a shame if any rogue agents saw this.