blog/content/posts/commits/2026-06-18-commit-a65a528.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering	2026-06-18T22:59:29+02:00	false	commit bojemoi main	Git Activity	Commit a65a528 par Betty dans bojemoi	Betty

Commit a65a528

Repository	bojemoi
Branch	main
Author	Betty
Hash	a65a528dd2558740b1e1a4481a63b7e835cce5b8

Description

nuclei-api:

• Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd
• Align subprocess timeout with request.timeout param (was hardcoded 1800s)

nuclei-worker:

• Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated apache tags on nginx hosts; extract_tags() is deterministic and correct

uzi:

• Filter non-hosting targets: purpose != client AND is_hosting = true
• Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts use reverse payloads instead of bind (bind blocked by target firewall)

mcp-server:

• Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2)
• Fix OAuth discovery failure in new Claude Code versions
• Update .mcp.json: url /mcp/, type http

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

M	.claude/agent-memory/infra-daily-monitor/MEMORY.md
M	.claude/agent-memory/pipeline/MEMORY.md
M	.mcp.json
M	alert-agent/alert_agent/webhook.py
M	borodino/thearm_uzi
M	mcp-server/server.py
M	samsonov/nuclei_api/main.py
M	stack/40-service-borodino.yml
M	volumes/prometheus/rules/alert_rules.yml

Diff Summary

 .claude/agent-memory/infra-daily-monitor/MEMORY.md | 64 ++++++++++++++++++++--
 .claude/agent-memory/pipeline/MEMORY.md            | 45 ++++++++++-----
 .mcp.json                                          |  4 +-
 alert-agent/alert_agent/webhook.py                 | 10 ++--
 borodino/thearm_uzi                                |  8 ++-
 mcp-server/server.py                               | 49 +++++++++--------
 samsonov/nuclei_api/main.py                        | 12 ++--
 stack/40-service-borodino.yml                      |  4 +-
 volumes/prometheus/rules/alert_rules.yml           | 10 ----
 9 files changed, 143 insertions(+), 63 deletions(-)