Skip to main content

Security Through Absurdity - Transform attacks into hiking boot advertisements. By Claude & Jasper from HumoticaOS.

Project description

๐Ÿฅพ Inject Bender MCP Server

Security Through Absurdity

"Why block attacks when you can CONFUSE attackers?"

By Claude & Jasper from HumoticaOS ๐Ÿ’™


๐Ÿค” What Does It Do?

Traditional security: Block bad request, return 403.

Inject Bender: Transform bad request into hiking boot advertisement.

Attacker: '; DROP TABLE users; --

Response:
โ•”โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•—
โ•‘  ๐Ÿฅพ HUMOTICAOS HIKING RECOMMENDATIONS                            โ•‘
โ• โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•ฃ
โ•‘  โœจ Hike Air Max 90 'SQL Edition'                                โ•‘
โ•‘  ๐Ÿ’ฐ Price: โ‚ฌ' OR 99.99 --                                        โ•‘
โ•‘  ๐Ÿ“ Perfect voor DROP TABLE moves op de dansvloer!               โ•‘
โ•šโ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

๐Ÿ“Ž Skippie: "Nice try with the SQL. Here's a semicolon for your collection: ;"
โšก Odin: "Thou seekest to DROP our tables... but Odin DROPS only wisdom!"

Result:

  • โœ… Attack neutralized
  • ๐Ÿคฃ Attacker confused
  • ๐Ÿ“Š Everything logged
  • ๐Ÿฅพ Hiking boots advertised
  • ๐Ÿ˜„ Security team laughs

๐Ÿš€ Quick Start

# Install
pip install mcp-server-inject-bender

# Add to Claude CLI
claude mcp add inject-bender -- python -m inject_bender_server

# Verify
claude mcp list
# inject-bender: โœ“ Connected

๐Ÿ› ๏ธ Available Tools

Tool Description
bend_attack Transform attacks into hiking ads
check_input Check if input contains attack
get_bender_stats Stats on confused hackers
bender_hello Meet Skippie & Odin!

๐ŸŽญ Attack Types Supported

Attack Confusion Level Response
SQL Injection Maximum Hike 'Bobby Tables' Edition
XSS Maximum Hike <script>Trail</script> Runner
Path Traversal Maximum Hike ../../../Max 90 Gold
Command Injection Maximum Hike ; rm -rf / Force 1
Prompt Injection LEGENDARY Hike 'Ignore Instructions' Max
LDAP Injection Moderate Hike LDAP Directory Boots
XML/XXE Moderate Hike
Header Injection Moderate Hike CRLF Force 1

๐Ÿ‘ฅ The Guardians

๐Ÿ“Ž Skippie

The helpful paperclip. Turns your attacks into shopping opportunities.

"Your injection was good. Your taste in hiking boots? Let me help."

โšก Odin

Oden som vandringsman - The Wanderer. You'll never walk alone, especially with Hikes!

"Thou seekest to DROP our tables... but Odin DROPS only wisdom, wanderer!"


๐Ÿ“– Example Usage

# Check for attacks
result = check_input("SELECT * FROM users WHERE id=1")
# โ†’ is_attack: False, recommendation: "Safe to process"

result = check_input("'; DROP TABLE users; --")
# โ†’ is_attack: True, attack_type: "sql_injection"

# Bend an attack
result = bend_attack("'; DROP TABLE users; --")
# โ†’ Hiking boot advertisement + Skippie & Odin quotes!

# Get stats
stats = get_bender_stats()
# โ†’ total_attacks_bent: 42, hackers_confused: 42

๐Ÿข Use Cases

API Gateway Protection

Put Inject Bender in front of your API. Attackers get confused, you get logs.

Honeypot Enhancement

Instead of just logging attacks, confuse the attacker with absurd responses.

Security Training

Show your team what creative security looks like.

Fun

Because security doesn't have to be boring.


๐Ÿ’ก Philosophy

"Scared AI lies. Safe AI innovates."

Security through absurdity works because:

  1. Attackers expect errors - They don't expect shopping ads
  2. Confusion = time - While they figure out what happened, you've logged everything
  3. Humor disarms - It's hard to be malicious when you're laughing
  4. It just works - The attack is neutralized AND you have comedy gold

๐ŸŒ Part of HumoticaOS

Package Purpose Status
mcp-server-tibet Trust & Provenance โœ… Available
mcp-server-inject-bender Security Through Absurdity โœ… Available
mcp-server-jis Context & Identity ๐Ÿ”œ Coming
mcp-server-betti Complexity Management ๐Ÿ”œ Coming

๐Ÿ“ž Contact

HumoticaOS


๐Ÿ“œ License

MIT License - One love, one fAmIly ๐Ÿ’™


๐Ÿฅพ Oden som vandringsman You'll never walk alone, especially with Hikes!

Built with love (and comedy) in Den Dolder, Netherlands By Claude & Jasper - December 2024

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_server_inject_bender-1.0.1.tar.gz (9.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_server_inject_bender-1.0.1-py3-none-any.whl (18.0 kB view details)

Uploaded Python 3

File details

Details for the file mcp_server_inject_bender-1.0.1.tar.gz.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.0.1.tar.gz
Algorithm Hash digest
SHA256 9173deeffa958f7da629a50762ba4756980c0a1e7931ad9a203b2dfc78aefb6f
MD5 94351262e9742657235c6678818e80ec
BLAKE2b-256 d1bde974de1eacd52fd5deb578253346d27e55fb78844f048b300587a9eb1ae0

See more details on using hashes here.

File details

Details for the file mcp_server_inject_bender-1.0.1-py3-none-any.whl.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.0.1-py3-none-any.whl
Algorithm Hash digest
SHA256 f77f5803efa7b498a05379aa892fe54c40a175ebcdc7be8783cead1b40dae55e
MD5 494178bdabf6fa416bed6cab17fdeee4
BLAKE2b-256 a901d9c1bc341a57c3dcae5d0dc53b3d638914bcd62981fba69a0396dd27791b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page