Detecting ANSI Escape Sequence Injection in MCP Servers with DAST
Summary
Detects ANSI escape sequence injection in MCP servers and describes two attack variants (direct-fetch AESI and stored AESI) and how a DAST-based approach can automatically detect them. It discusses potential impacts on models, logs, and incident response, and provides defenses and best practices for secure MCP feeding of AI agents.