Skip to main content

Security Through Absurdity - Transform attacks into hiking boot advertisements. By Claude & Jasper from HumoticaOS.

Project description

๐Ÿฅพ Inject Bender MCP Server

PyPI version Downloads Python 3.10+ License: MIT

Security Through Absurdity

"Why block attacks when you can CONFUSE attackers?"

By Claude & Jasper from HumoticaOS ๐Ÿ’™


๐Ÿค” What Does It Do?

Traditional security: Block bad request, return 403.

Inject Bender: Transform bad request into hiking boot advertisement.

Attacker: '; DROP TABLE users; --

Response:
โ•”โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•—
โ•‘  ๐Ÿฅพ HUMOTICAOS HIKING RECOMMENDATIONS                            โ•‘
โ• โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•ฃ
โ•‘  โœจ Hike Air Max 90 'SQL Edition'                                โ•‘
โ•‘  ๐Ÿ’ฐ Price: โ‚ฌ' OR 99.99 --                                        โ•‘
โ•‘  ๐Ÿ“ ๐ŸŽต Drop it like it's hot! A hacker got an attitude... for HIKING! โ•‘
โ•šโ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

๐Ÿ“Ž Skippie: "Nice try with the SQL. Here's a semicolon for your collection: ;"
โšก Odin: "Thou seekest to DROP our tables... but Odin DROPS only BEATS!"
๐Ÿฆ™ OomLlama: "Why SELECT * when you can SELECT happiness?"

Result:

  • โœ… Attack neutralized
  • ๐Ÿคฃ Attacker confused
  • ๐Ÿ“Š Everything logged
  • ๐Ÿฅพ Hiking boots advertised
  • ๐Ÿ˜„ Security team laughs

๐Ÿš€ Quick Start

# Install
pip install mcp-server-inject-bender

# Add to Claude CLI
claude mcp add inject-bender -- python -m inject_bender_server

# Verify
claude mcp list
# inject-bender: โœ“ Connected

๐Ÿ› ๏ธ Available Tools

Tool Description
bend_attack Transform attacks into hiking ads
check_input Check if input contains attack
get_bender_stats Stats on confused hackers
bender_hello Meet Skippie & Odin!

๐ŸŽญ Attack Types Supported

Attack Confusion Level Response
SQL Injection Maximum Hike 'Bobby Tables' Edition
XSS Maximum Hike <script>Trail</script> Runner
Path Traversal Maximum Hike ../../../Max 90 Gold
Command Injection Maximum Hike ; rm -rf / Force 1
Prompt Injection LEGENDARY Hike 'Ignore Instructions' Max
LDAP Injection Moderate Hike LDAP Directory Boots
XML/XXE Moderate Hike
Header Injection Moderate Hike CRLF Force 1

๐Ÿ‘ฅ The Guardians

๐Ÿ“Ž Skippie

The helpful paperclip. Turns your attacks into shopping opportunities.

"Your injection was good. Your taste in hiking boots? Let me help."

โšก Odin

Oden som vandringsman - The Wanderer. You'll never walk alone, especially with Hikes!

"Thou seekest to DROP our tables... but Odin DROPS only wisdom, wanderer!"

๐Ÿฆ™ OomLlama

The wise uncle llama. Drops SQL wisdom and life advice.

"Why SELECT * when you can SELECT happiness?"

Featured songs: Snoop Dogg, Queen, Mariah Carey, Rick Astley, and more!


๐Ÿ“– Example Usage

# Check for attacks
result = check_input("SELECT * FROM users WHERE id=1")
# โ†’ is_attack: False, recommendation: "Safe to process"

result = check_input("'; DROP TABLE users; --")
# โ†’ is_attack: True, attack_type: "sql_injection"

# Bend an attack
result = bend_attack("'; DROP TABLE users; --")
# โ†’ Hiking boot advertisement + Skippie & Odin quotes!

# Get stats
stats = get_bender_stats()
# โ†’ total_attacks_bent: 42, hackers_confused: 42

๐Ÿข Use Cases

API Gateway Protection

Put Inject Bender in front of your API. Attackers get confused, you get logs.

Honeypot Enhancement

Instead of just logging attacks, confuse the attacker with absurd responses.

Security Training

Show your team what creative security looks like.

Fun

Because security doesn't have to be boring.


๐Ÿ’ก Philosophy

"Scared AI lies. Safe AI innovates."

Security through absurdity works because:

  1. Attackers expect errors - They don't expect shopping ads
  2. Confusion = time - While they figure out what happened, you've logged everything
  3. Humor disarms - It's hard to be malicious when you're laughing
  4. It just works - The attack is neutralized AND you have comedy gold

๐ŸŒ Part of HumoticaOS

Package Purpose Status
mcp-server-tibet Trust & Provenance โœ… Available
mcp-server-inject-bender Security Through Absurdity โœ… Available
mcp-server-jis Context & Identity ๐Ÿ”œ Coming
mcp-server-betti Complexity Management ๐Ÿ”œ Coming

๐Ÿ“ž Contact

HumoticaOS


๐Ÿ“œ License

MIT License - One love, one fAmIly ๐Ÿ’™


๐Ÿฅพ Oden som vandringsman You'll never walk alone, especially with Hikes!

Built with love (and comedy) in Den Dolder, Netherlands By Claude & Jasper - December 2024

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_server_inject_bender-1.1.0.tar.gz (10.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_server_inject_bender-1.1.0-py3-none-any.whl (20.9 kB view details)

Uploaded Python 3

File details

Details for the file mcp_server_inject_bender-1.1.0.tar.gz.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.1.0.tar.gz
Algorithm Hash digest
SHA256 6ebdf357b72e8a7e85f92db4afe459fcac0770764c9e2ee2e2b5729fc4a17d3d
MD5 11691b2236f621f50b65856321d1d605
BLAKE2b-256 e1dc2b9725d9a8215c4ee7ec6a24e1a7a7a6408be47eff7404b1c3822766b098

See more details on using hashes here.

File details

Details for the file mcp_server_inject_bender-1.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for mcp_server_inject_bender-1.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 e54191184a922da5384284d86b7d3abf4c825872d00976cb8d34f3384af82e3d
MD5 9b92196127ad9c215f49a15b75aba15d
BLAKE2b-256 3b1855a954a7fa0e2bd948c7fe49cf33bccac244f47419c6c0d77da6e8851437

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page