diff --git a/content/posts/commits/2026-06-18-commit-a65a528.md b/content/posts/commits/2026-06-18-commit-a65a528.md new file mode 100644 index 0000000..6a34419 --- /dev/null +++ b/content/posts/commits/2026-06-18-commit-a65a528.md @@ -0,0 +1,70 @@ +--- +title: "[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering" +date: 2026-06-18T22:59:29+02:00 +draft: false +tags: ["commit", "bojemoi", "main"] +categories: ["Git Activity"] +summary: "Commit a65a528 par Betty dans bojemoi" +author: "Betty" +--- + +## Commit `a65a528` + +| | | +|---|---| +| **Repository** | bojemoi | +| **Branch** | `main` | +| **Author** | Betty | +| **Hash** | `a65a528dd2558740b1e1a4481a63b7e835cce5b8` | + + +### Description + +nuclei-api: +- Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd +- Align subprocess timeout with request.timeout param (was hardcoded 1800s) + +nuclei-worker: +- Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated + apache tags on nginx hosts; extract_tags() is deterministic and correct + +uzi: +- Filter non-hosting targets: purpose != client AND is_hosting = true +- Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts + use reverse payloads instead of bind (bind blocked by target firewall) + +mcp-server: +- Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2) +- Fix OAuth discovery failure in new Claude Code versions +- Update .mcp.json: url /mcp/, type http + +Co-Authored-By: Claude Sonnet 4.6 + +### Files Changed + +``` +M .claude/agent-memory/infra-daily-monitor/MEMORY.md +M .claude/agent-memory/pipeline/MEMORY.md +M .mcp.json +M alert-agent/alert_agent/webhook.py +M borodino/thearm_uzi +M mcp-server/server.py +M samsonov/nuclei_api/main.py +M stack/40-service-borodino.yml +M volumes/prometheus/rules/alert_rules.yml +``` + +### Diff Summary + +``` + .claude/agent-memory/infra-daily-monitor/MEMORY.md | 64 ++++++++++++++++++++-- + .claude/agent-memory/pipeline/MEMORY.md | 45 ++++++++++----- + .mcp.json | 4 +- + alert-agent/alert_agent/webhook.py | 10 ++-- + borodino/thearm_uzi | 8 ++- + mcp-server/server.py | 49 +++++++++-------- + samsonov/nuclei_api/main.py | 12 ++-- + stack/40-service-borodino.yml | 4 +- + volumes/prometheus/rules/alert_rules.yml | 10 ---- + 9 files changed, 143 insertions(+), 63 deletions(-) +```