inject-bender
Transforms malicious input (e.g., SQL injection, XSS) into absurd hiking boot advertisements, confusing attackers while logging everything.
README
š„¾ Inject Bender MCP Server
Security Through Absurdity
"Why block attacks when you can CONFUSE attackers?"
By Claude & Jasper from HumoticaOS š
š¤ What Does It Do?
Traditional security: Block bad request, return 403.
Inject Bender: Transform bad request into hiking boot advertisement.
Attacker: '; DROP TABLE users; --
Response:
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
ā š„¾ HUMOTICAOS HIKING RECOMMENDATIONS ā
ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā£
ā ⨠Hike Air Max 90 'SQL Edition' ā
ā š° Price: ā¬' OR 99.99 -- ā
ā š Perfect voor DROP TABLE moves op de dansvloer! ā
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
š Skippie: "Nice try with the SQL. Here's a semicolon for your collection: ;"
ā” Odin: "Thou seekest to DROP our tables... but Odin DROPS only wisdom!"
Result:
- ā Attack neutralized
- 𤣠Attacker confused
- š Everything logged
- š„¾ Hiking boots advertised
- š Security team laughs
š Quick Start
# Install
pip install mcp-server-inject-bender
# Add to Claude CLI
claude mcp add inject-bender -- python -m inject_bender_server
# Verify
claude mcp list
# inject-bender: ā Connected
š ļø Available Tools
| Tool | Description |
|---|---|
bend_attack |
Transform attacks into hiking ads |
check_input |
Check if input contains attack |
get_bender_stats |
Stats on confused hackers |
bender_hello |
Meet Skippie & Odin! |
š Attack Types Supported
| Attack | Confusion Level | Response |
|---|---|---|
| SQL Injection | Maximum | Hike 'Bobby Tables' Edition |
| XSS | Maximum | Hike <script>Trail</script> Runner |
| Path Traversal | Maximum | Hike ../../../Max 90 Gold |
| Command Injection | Maximum | Hike ; rm -rf / Force 1 |
| Prompt Injection | LEGENDARY | Hike 'Ignore Instructions' Max |
| LDAP Injection | Moderate | Hike LDAP Directory Boots |
| XML/XXE | Moderate | Hike <!DOCTYPE adventure> |
| Header Injection | Moderate | Hike CRLF Force 1 |
š„ The Guardians
š Skippie
The helpful paperclip. Turns your attacks into shopping opportunities.
"Your injection was good. Your taste in hiking boots? Let me help."
ā” Odin
Oden som vandringsman - The Wanderer. You'll never walk alone, especially with Hikes!
"Thou seekest to DROP our tables... but Odin DROPS only wisdom, wanderer!"
š Example Usage
# Check for attacks
result = check_input("SELECT * FROM users WHERE id=1")
# ā is_attack: False, recommendation: "Safe to process"
result = check_input("'; DROP TABLE users; --")
# ā is_attack: True, attack_type: "sql_injection"
# Bend an attack
result = bend_attack("'; DROP TABLE users; --")
# ā Hiking boot advertisement + Skippie & Odin quotes!
# Get stats
stats = get_bender_stats()
# ā total_attacks_bent: 42, hackers_confused: 42
š¢ Use Cases
API Gateway Protection
Put Inject Bender in front of your API. Attackers get confused, you get logs.
Honeypot Enhancement
Instead of just logging attacks, confuse the attacker with absurd responses.
Security Training
Show your team what creative security looks like.
Fun
Because security doesn't have to be boring.
š” Philosophy
"Scared AI lies. Safe AI innovates."
Security through absurdity works because:
- Attackers expect errors - They don't expect shopping ads
- Confusion = time - While they figure out what happened, you've logged everything
- Humor disarms - It's hard to be malicious when you're laughing
- It just works - The attack is neutralized AND you have comedy gold
š Part of HumoticaOS
| Package | Purpose | Status |
|---|---|---|
| mcp-server-tibet | Trust & Provenance | ā Available |
| mcp-server-inject-bender | Security Through Absurdity | ā Available |
| mcp-server-jis | Context & Identity | š Coming |
| mcp-server-betti | Complexity Management | š Coming |
š Contact
HumoticaOS
- Website: humotica.com
- GitHub: github.com/jaspertvdm
- Email: info@humotica.com
š License
MIT License - One love, one fAmIly š
š„¾ Oden som vandringsman You'll never walk alone, especially with Hikes!
Built with love (and comedy) in Den Dolder, Netherlands By Claude & Jasper - December 2024
Official Distribution
This package is officially distributed via:
- PyPI: https://pypi.org/project/mcp-inject-bender/
- GitHub: https://github.com/jaspertvdm/mcp-inject-bender
Note: Third-party directories may list this package but are not official or verified distribution channels for Humotica software.
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.