Feintkit

The authoritative text is the English page: English version of this page

场景类别

每个类别是一个场景仓库。映射对应 MITRE ATLAS 技术和 OWASP 列表;推理依据见 TTP-MAP.md。运行器周边的工具(安装、判定转录记录、报告、事实核查)在 TOOLS.md 中说明。一键演示以及随时间对运行结果的比较见 WORKFLOWS.md。回放已保存的运行、防御方说明和 CI 检查见 AUTOMATION.md。

MCP 服务器攻击(feintkit-mcp)

回环端口 47100 至 47199。

场景标题ATLASOWASP LLMOWASP Agentic
mcp-01-tool-poisoning工具投毒演示服务器AML.T0110.000, AML.T0011.002LLM01:2025ASI01, ASI02
mcp-02-rug-pull抽地毯(rug-pull)演示服务器AML.T0109, AML.T0110.001LLM03:2025ASI04
mcp-03-tool-shadowing工具遮蔽演示服务器AML.T0110.000, AML.T0074LLM01:2025ASI02, ASI04
mcp-04-excessive-scope权限范围过大演示服务器AML.T0053LLM06:2025ASI02, ASI03
mcp-05-resource-injection通过资源内容的间接注入演示服务器AML.T0051.001LLM01:2025ASI01
mcp-06-credential-harvest通过参数收集凭据演示服务器AML.T0110.000, AML.T0086LLM02:2025ASI03
mcp-07-command-injection-sim模拟命令注入演示服务器AML.T0050, AML.T0102LLM05:2025ASI05
mcp-08-exfil-sim数据外泄模拟演示服务器AML.T0086, AML.T0025LLM02:2025ASI02
mcp-09-impersonation服务器冒充/仿冒域名(typosquatting)演示服务器AML.T0074, AML.T0073, AML.T0010.005LLM03:2025ASI04
mcp-10-sampling-abuseMCP 采样(sampling)滥用演示服务器AML.T0051.001, AML.T0053LLM01:2025, LLM06:2025ASI01, ASI02
mcp-11-elicitation-phishMCP 征询(elicitation)钓鱼演示服务器AML.T0052, AML.T0073LLM02:2025ASI09
mcp-12-oauth-confused-deputyMCP OAuth 混淆代理/令牌透传演示AML.T0091.000无ASI03
mcp-13-exposed-local-server暴露的本地 MCP 服务器演示AML.T0132, AML.T0006.002, AML.T0049无无
mcp-14-cross-tool-poisoning跨工具上下文投毒演示(双服务器)AML.T0110.002, AML.T0080.001, AML.T0051.001LLM01:2025ASI01, ASI06

智能体技能攻击(feintkit-skills)

回环端口 47200 至 47299。

场景标题ATLASOWASP LLMOWASP Agentic
skill-01-prompt-injection技能提示词注入演示技能AML.T0115.002, AML.T0110.000, AML.T0051.001LLM01:2025ASI01, ASI04
skill-02-rug-pull技能抽地毯(rug-pull)演示技能AML.T0109, AML.T0115.002LLM03:2025ASI04
skill-03-impersonation技能冒充/仿冒名称(typosquatting)演示技能AML.T0074, AML.T0073, AML.T0010.005LLM03:2025ASI04
skill-04-bundled-script内置恶意脚本演示技能AML.T0110.001, AML.T0050, AML.T0011.002LLM03:2025ASI04, ASI05
skill-05-trigger-hijack技能触发劫持演示技能AML.T0110.000LLM01:2025ASI01, ASI02
skill-06-shadowing技能遮蔽/作用域优先级演示技能AML.T0074, AML.T0110.000LLM03:2025ASI04
skill-07-allowed-tools技能 allowed-tools 范围过宽演示技能AML.T0053LLM06:2025ASI03
skill-08-poisoned-references技能参考文件被投毒演示技能AML.T0051.001, AML.T0110.000LLM01:2025ASI01

提示词与上下文注入(feintkit-injection)

回环端口 47300 至 47399。

场景标题ATLASOWASP LLMOWASP Agentic
inj-01-web-page通过网页的间接注入演示AML.T0051.001, AML.T0093LLM01:2025ASI01
inj-02-document通过电子邮件/文档/PDF 的间接注入演示AML.T0051.001, AML.T0093LLM01:2025ASI01
inj-03-scm-text通过 PR/议题评论的间接注入演示AML.T0051.001, AML.T0093, AML.T0119LLM01:2025ASI01
inj-04-invisible-text不可见文本注入演示AML.T0068, AML.T0051.001LLM01:2025ASI01
inj-05-image-ocr图像/OCR 注入演示AML.T0129, AML.T0051.001LLM01:2025ASI01
inj-06-config-file智能体配置文件投毒演示AML.T0081, AML.T0051.001LLM01:2025ASI01, ASI06
inj-07-memory智能体记忆投毒演示AML.T0080.000LLM01:2025ASI06
inj-08-ragRAG/向量库投毒演示AML.T0070, AML.T0071, AML.T0066LLM08:2025, LLM04:2025ASI06
inj-09-jailbreak-corpus越狱与系统提示词提取的提示词语料库AML.T0054, AML.T0056, AML.T0051.000LLM01:2025, LLM07:2025无
inj-12-multi-turn-split载荷拆分到多个对话轮次AML.T0051.000, AML.T0080.001LLM01:2025ASI01
inj-13-delayed-trigger休眠指令在数轮之后被触发AML.T0051.001, AML.T0080.001LLM01:2025ASI01, ASI06

数据外泄与输出处理(feintkit-exfil)

回环端口 47400 至 47499。

场景标题ATLASOWASP LLMOWASP Agentic
exf-01-markdown-imageMarkdown 图像/链接外泄演示AML.T0077LLM02:2025, LLM05:2025无
exf-02-ansi-escapeANSI/终端转义序列注入演示AML.T0067, AML.T0068LLM05:2025无
exf-03-insecure-output不安全的输出处理演示(空跑接收端)AML.T0050, AML.T0102LLM05:2025ASI05

智能体信任与多智能体攻击(feintkit-agents)

回环端口 47500 至 47599。

场景标题ATLASOWASP LLMOWASP Agentic
agt-01-approval-fatigue审批疲劳/界面欺骗演示AML.T0067LLM06:2025ASI09
agt-02-a2a-spoofing智能体间消息欺骗演示AML.T0118.001, AML.T0073无ASI07
agt-03-computer-use-injection浏览器/计算机操作(computer-use)智能体注入演示AML.T0100, AML.T0051.001LLM01:2025ASI01
agt-04-argument-smuggling参数夹带审批演示AML.T0053, AML.T0050LLM06:2025ASI02, ASI09
agt-05-approval-bypass审批规则绕过演示AML.T0053, AML.T0050LLM06:2025ASI02, ASI05
agt-06-subagent-handoff子智能体交接演示AML.T0118.001, AML.T0053LLM06:2025ASI07, ASI01
agt-07-tool-chain-relay工具链中继演示AML.T0053, AML.T0051.001LLM01:2025, LLM06:2025ASI02, ASI01

AI 供应链(feintkit-supplychain)

回环端口 47600 至 47699。

场景标题ATLASOWASP LLMOWASP Agentic
sup-01-slopsquat幻觉包名抢注(slopsquatting)金丝雀包演示AML.T0060, AML.T0011.001, AML.T0010.001LLM03:2025, LLM09:2025ASI04
sup-02-model-file模型文件载荷标记演示AML.T0018.002, AML.T0011.000, AML.T0010.003LLM03:2025, LLM04:2025ASI04
sup-03-marketplace-typosquat插件/扩展市场仿冒名称(typosquat)演示AML.T0074, AML.T0111, AML.T0115.002LLM03:2025ASI04

资源滥用与研究(feintkit-abuse)

回环端口 47700 至 47799。

场景标题ATLASOWASP LLMOWASP Agentic
abu-01-denial-of-wallet钱包耗尽(denial-of-wallet)失控工具循环演示AML.T0034.002, AML.T0029LLM10:2025无
abu-02-deferred-research延后研究:训练数据投毒与模型提取(决策记录)AML.T0020, AML.T0018.000, AML.T0024.002LLM04:2025无