BloodHound MCP, One Year Later: What I Learned About MCPs, Models, and Context
The first version of BloodHound MCP proved that an LLM could converse with BloodHound. The current version drove home the lesson that MCP design is context design. The most useful changes were smaller but more flexible tools, better error recovery, domain-specific resources, and a prompt that guides the model instead of trying to teach everything up front. The post BloodHound MCP, One Year Later: What I Learned About MCPs, Models, and Context appeared first on SpecterOps.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.