Skip to content

Releases: sshpie/aism

Release list

v0.3.0 — AISM

v0.3.0 — AISM Latest
Latest

Choose a tag to compare

View all tags
@sshpie sshpie released this 01 Sep 23:23
v0.3.0
deaf943

AI Attack Surface Management (AISM)

This release renames the tool from tiptoe to AISM and adds two major detection layers.

New

  • Voice AI layer — 42 platforms across voice-synthesis, voice-asr, and voice-infrastructure families. Confirmed via snake DETECT_CHECKS, Gradio /info titles, and OpenAI-compat model IDs. Includes CORS/CSWSH check on confirmed voice services.
  • MCP HTTP server detection — fingerprints network-accessible MCP Streamable HTTP servers via POST-based JSON-RPC initialize; calls tools/list and scans tool descriptions for V2 injection patterns (tool description poisoning). Escalates to CRITICAL when poisoning is detected.
  • Cisco integrations — Stealthwatch/SNA flow correlation, NSO RESTCONF ACL containment, AI Defense supply chain scanning, Webex Adaptive Cards with Acknowledge/Isolate action buttons.
  • Rename — binary, module path (github.com/sshpie/aism), and all references updated.

Install

go install github.com/sshpie/aism@latest
Assets 2
Loading

v0.2.0

v0.2.0

Choose a tag to compare

View all tags
@sshpie sshpie released this 22 Aug 19:54
v0.2.0
a47e1d2

Changes

  • Congestion control tuning: adaptive backoff on packet loss signals
  • Extended AI/ML service signature table (added Jetson registry, vLLM variants)
  • Live status interface refresh rate configurable via --interval
  • Block detection false-positive reduction on CDN-fronted endpoints
  • Fixed goroutine leak on context cancellation during probe burst
Loading