mcploitable is a set of MCP servers that do not know they are part of a training range. Each is designed with intentionally vulnerable tools and/or overly permissive prompts. They are designed to replicate real-life agentic attacks and demonstrate the OWASP Agentic Top 10. There are also 3 guided simulations for those ASI categories that don't lend themselves well to being a vulnerable box.