71 lines
2.2 KiB
Markdown
71 lines
2.2 KiB
Markdown
---
|
|
title: "[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering"
|
|
date: 2026-06-18T22:59:29+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit a65a528 par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `a65a528`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `a65a528dd2558740b1e1a4481a63b7e835cce5b8` |
|
|
|
|
|
|
### Description
|
|
|
|
nuclei-api:
|
|
- Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd
|
|
- Align subprocess timeout with request.timeout param (was hardcoded 1800s)
|
|
|
|
nuclei-worker:
|
|
- Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated
|
|
apache tags on nginx hosts; extract_tags() is deterministic and correct
|
|
|
|
uzi:
|
|
- Filter non-hosting targets: purpose != client AND is_hosting = true
|
|
- Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts
|
|
use reverse payloads instead of bind (bind blocked by target firewall)
|
|
|
|
mcp-server:
|
|
- Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2)
|
|
- Fix OAuth discovery failure in new Claude Code versions
|
|
- Update .mcp.json: url /mcp/, type http
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M .claude/agent-memory/infra-daily-monitor/MEMORY.md
|
|
M .claude/agent-memory/pipeline/MEMORY.md
|
|
M .mcp.json
|
|
M alert-agent/alert_agent/webhook.py
|
|
M borodino/thearm_uzi
|
|
M mcp-server/server.py
|
|
M samsonov/nuclei_api/main.py
|
|
M stack/40-service-borodino.yml
|
|
M volumes/prometheus/rules/alert_rules.yml
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
.claude/agent-memory/infra-daily-monitor/MEMORY.md | 64 ++++++++++++++++++++--
|
|
.claude/agent-memory/pipeline/MEMORY.md | 45 ++++++++++-----
|
|
.mcp.json | 4 +-
|
|
alert-agent/alert_agent/webhook.py | 10 ++--
|
|
borodino/thearm_uzi | 8 ++-
|
|
mcp-server/server.py | 49 +++++++++--------
|
|
samsonov/nuclei_api/main.py | 12 ++--
|
|
stack/40-service-borodino.yml | 4 +-
|
|
volumes/prometheus/rules/alert_rules.yml | 10 ----
|
|
9 files changed, 143 insertions(+), 63 deletions(-)
|
|
```
|