Skip to content

v0.3.0 — AISM

Latest
Latest

Choose a tag to compare

View all tags
@sshpie sshpie released this 01 Sep 23:23
· 15 commits to main since this release
v0.3.0
deaf943

AI Attack Surface Management (AISM)

This release renames the tool from tiptoe to AISM and adds two major detection layers.

New

  • Voice AI layer — 42 platforms across voice-synthesis, voice-asr, and voice-infrastructure families. Confirmed via snake DETECT_CHECKS, Gradio /info titles, and OpenAI-compat model IDs. Includes CORS/CSWSH check on confirmed voice services.
  • MCP HTTP server detection — fingerprints network-accessible MCP Streamable HTTP servers via POST-based JSON-RPC initialize; calls tools/list and scans tool descriptions for V2 injection patterns (tool description poisoning). Escalates to CRITICAL when poisoning is detected.
  • Cisco integrations — Stealthwatch/SNA flow correlation, NSO RESTCONF ACL containment, AI Defense supply chain scanning, Webex Adaptive Cards with Acknowledge/Isolate action buttons.
  • Rename — binary, module path (github.com/sshpie/aism), and all references updated.

Install

go install github.com/sshpie/aism@latest
Assets 2
Loading