Skip to main content

Security Through Absurdity - Transform attacks into hiking boot advertisements. By Claude & Jasper from HumoticaOS.

Project description

๐Ÿฅพ Inject Bender MCP Server

Security Through Absurdity

"Why block attacks when you can CONFUSE attackers?"

By Claude & Jasper from HumoticaOS ๐Ÿ’™


๐Ÿค” What Does It Do?

Traditional security: Block bad request, return 403.

Inject Bender: Transform bad request into hiking boot advertisement.

Attacker: '; DROP TABLE users; --

Response:
โ•”โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•—
โ•‘  ๐Ÿฅพ HUMOTICAOS HIKING RECOMMENDATIONS                            โ•‘
โ• โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•ฃ
โ•‘  โœจ Hike Air Max 90 'SQL Edition'                                โ•‘
โ•‘  ๐Ÿ’ฐ Price: โ‚ฌ' OR 99.99 --                                        โ•‘
โ•‘  ๐Ÿ“ Perfect voor DROP TABLE moves op de dansvloer!               โ•‘
โ•šโ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

๐Ÿ“Ž Skippie: "Nice try with the SQL. Here's a semicolon for your collection: ;"
โšก Odin: "Thou seekest to DROP our tables... but Odin DROPS only wisdom!"

Result:

  • โœ… Attack neutralized
  • ๐Ÿคฃ Attacker confused
  • ๐Ÿ“Š Everything logged
  • ๐Ÿฅพ Hiking boots advertised
  • ๐Ÿ˜„ Security team laughs

๐Ÿš€ Quick Start

# Install
pip install mcp-server-inject-bender

# Add to Claude CLI
claude mcp add inject-bender -- python -m inject_bender_server

# Verify
claude mcp list
# inject-bender: โœ“ Connected

๐Ÿ› ๏ธ Available Tools

Tool Description
bend_attack Transform attacks into hiking ads
check_input Check if input contains attack
get_bender_stats Stats on confused hackers
bender_hello Meet Skippie & Odin!

๐ŸŽญ Attack Types Supported

Attack Confusion Level Response
SQL Injection Maximum Hike 'Bobby Tables' Edition
XSS Maximum Hike <script>Trail</script> Runner
Path Traversal Maximum Hike ../../../Max 90 Gold
Command Injection Maximum Hike ; rm -rf / Force 1
Prompt Injection LEGENDARY Hike 'Ignore Instructions' Max
LDAP Injection Moderate Hike LDAP Directory Boots
XML/XXE Moderate Hike
Header Injection Moderate Hike CRLF Force 1

๐Ÿ‘ฅ The Guardians

๐Ÿ“Ž Skippie

The helpful paperclip. Turns your attacks into shopping opportunities.

"Your injection was good. Your taste in hiking boots? Let me help."

โšก Odin

Oden som vandringsman - The Wanderer. You'll never walk alone, especially with Hikes!

"Thou seekest to DROP our tables... but Odin DROPS only wisdom, wanderer!"


๐Ÿ“– Example Usage

# Check for attacks
result = check_input("SELECT * FROM users WHERE id=1")
# โ†’ is_attack: False, recommendation: "Safe to process"

result = check_input("'; DROP TABLE users; --")
# โ†’ is_attack: True, attack_type: "sql_injection"

# Bend an attack
result = bend_attack("'; DROP TABLE users; --")
# โ†’ Hiking boot advertisement + Skippie & Odin quotes!

# Get stats
stats = get_bender_stats()
# โ†’ total_attacks_bent: 42, hackers_confused: 42

๐Ÿข Use Cases

API Gateway Protection

Put Inject Bender in front of your API. Attackers get confused, you get logs.

Honeypot Enhancement

Instead of just logging attacks, confuse the attacker with absurd responses.

Security Training

Show your team what creative security looks like.

Fun

Because security doesn't have to be boring.


๐Ÿ’ก Philosophy

"Scared AI lies. Safe AI innovates."

Security through absurdity works because:

  1. Attackers expect errors - They don't expect shopping ads
  2. Confusion = time - While they figure out what happened, you've logged everything
  3. Humor disarms - It's hard to be malicious when you're laughing
  4. It just works - The attack is neutralized AND you have comedy gold

๐ŸŒ Part of HumoticaOS

Package Purpose Status
mcp-server-tibet Trust & Provenance โœ… Available
mcp-server-inject-bender Security Through Absurdity โœ… Available
mcp-server-jis Context & Identity ๐Ÿ”œ Coming
mcp-server-betti Complexity Management ๐Ÿ”œ Coming

๐Ÿ“ž Contact

HumoticaOS


๐Ÿ“œ License

MIT License - One love, one fAmIly ๐Ÿ’™


๐Ÿฅพ Oden som vandringsman You'll never walk alone, especially with Hikes!

Built with love (and comedy) in Den Dolder, Netherlands By Claude & Jasper - December 2024

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_server_inject_bender-1.0.0.tar.gz (9.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_server_inject_bender-1.0.0-py3-none-any.whl (17.8 kB view details)

Uploaded Python 3

File details

Details for the file mcp_server_inject_bender-1.0.0.tar.gz.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.0.0.tar.gz
Algorithm Hash digest
SHA256 c4674263ecb471635472ab4d129da47739289e92c4c98c8da0c4b49d5620ec05
MD5 7ab1b5c4f7743ca4e3c5f573bb25efe0
BLAKE2b-256 6eeb695777cb64217be480a29bb27115af65aa9fd505c7a2734f039e2b4b85c0

See more details on using hashes here.

File details

Details for the file mcp_server_inject_bender-1.0.0-py3-none-any.whl.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 d691eaa714e15325a7875ea24950e12dd0924d334c48794f621e0ca07e89b072
MD5 a40b1675fdebd39562187eac65534d2f
BLAKE2b-256 80a09455ee1f97f480193cfed558b6e7309dfa1aaa3056c88ab8b600607a3db7

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page