MCPs › Security › DVMCP — Damn Vulnerable MCP
An intentionally vulnerable MCP server for security training, simulating a fictional company with 28 vulnerable tools and 38 challenges to learn AI agent attack and defense.
Not monetized yet
Turn DVMCP — Damn Vulnerable MCP’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install DVMCP — Damn Vulnerable MCP
For anyone using DVMCP — Damn Vulnerable MCP — no Lulu account needed# stdio server — install per the repository README: https://github.com/ds-ac-poc/pt-clm__damn-vulnerable-mcp-server
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
DVMCP — Damn Vulnerable MCP installs from source — follow the repository README.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together
Your server?
This is for the person who owns DVMCP — Damn Vulnerable MCP — adds Lulu Ads to your own code. Not the install steps above, those are for your users.
Copies a ready prompt: your coding agent installs the lulu-ads SDK, wires the slot, and applies the widget design guide.
or set up manually at getlulu.dev/publishers
Get verified so you can edit the page. Your badge is already live below — no claim needed for that.
Managed hosting with monetization built in — waitlist.
[](https://getlulu.dev/mcps/dvmcp-damn-vulnerable-mcp)