inject-bender 0.3.0

Security input validation with dual response modes: legal deterrence (NIS2/GDPR compliant audit trail) or comedy (hiking boots for hackers). TIBET provenance. OWASP aware.

inject-bender

Security input validation with dual response modes: legal deterrence (NIS2/GDPR compliant audit trail) or comedy (hiking boots for hackers).

Every detected attack is logged with TIBET provenance tokens.

Install

pip install inject-bender

With TIBET audit trail:

pip install inject-bender[tibet]

With FastAPI middleware:

pip install inject-bender[api]

Quick Start

from inject_bender import InjectBender

bender = InjectBender(mode="legal")  # or "comedy"
result = bender.bend("'; DROP TABLE users; --")

if result["was_attack"]:
    print(result["formatted"])
    print(f"Incident: {result['incident_id']}")

Detection Only

from inject_bender import detect

is_attack, attack_type = detect("SELECT * FROM users WHERE 1=1")
# (True, "sql_injection")

Modes

Mode	Response	Use Case
legal	Law citations, NIS2 audit trail, incident reports	Production, enterprise
comedy	Hiking boot ads (Skippie & Odin)	Development, demos, honeypots
silent	Detect and log only	Monitoring, WAF integration
custom	Your own response function	Any

ASGI Middleware

from fastapi import FastAPI
from inject_bender.middleware import InjectBenderMiddleware

app = FastAPI()
app.add_middleware(InjectBenderMiddleware, mode="legal")

CLI

inject-bender check "'; DROP TABLE users; --"
inject-bender bend --mode comedy "<script>alert('xss')</script>"
inject-bender laws
inject-bender demo

Attack Types Detected

SQL Injection, XSS, Command Injection, Path Traversal, Prompt Injection, LDAP Injection, XML/XXE, Header Injection, Template Injection (SSTI).

NIS2 Compliance

• Automatic incident detection and logging
• Immutable TIBET audit trail
• Report generation: NIS2, AP (Autoriteit Persoonsgegevens), Politie
• 24-hour deadline tracking

Legal Mapping

Dutch/EU criminal law per attack type: Sr art. 138ab (computervredebreuk), Sr art. 350a (gegevensvernieling), AVG/GDPR art. 32/33/34, EU AI Act, EU 2013/40.

License

MIT — Humotica AI Lab 2025-2026