Projects on Ankit Maurya

MCP Monitoring Tool

Sat, 15 Jun 2024 00:00:00 +0000

This project is a proxy-based monitoring system for inspecting LLM context during conversations. It provides visibility into what’s being sent to and from AI models.

Features

Context Inspection: Monitor all prompts and responses going to LLM APIs
Security Logging: Capture and store interaction data for security analysis
Real-time Monitoring: Live view of active conversations
Data Export: Export conversation logs for analysis

Architecture

The tool sits as a proxy between your application and the LLM API, intercepting all traffic for inspection.

Secure Cloudflare Tunnel + Nginx

Mon, 20 May 2024 00:00:00 +0000

A comprehensive guide to exposing self-hosted services securely using Cloudflare Tunnel and Nginx reverse proxy.

Why This Setup?

No need to open ports on your firewall
Automatic SSL/TLS encryption
DDoS protection from Cloudflare
Access control via Cloudflare Access

Architecture Overview

User --> Cloudflare --> Tunnel --> Nginx --> Service

Configuration Steps

Create a Cloudflare account and add your domain
Install cloudflared on your server
Configure the tunnel with your services
Set up Nginx as a reverse proxy
Configure SSL certificates

Nginx Configuration

server {
    listen 443 ssl;
    server_name service.example.com;

    ssl_certificate /etc/ssl/certs/cert.pem;
    ssl_certificate_key /etc/ssl/private/key.pem;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

Security Considerations

Enable authenticated origin pulls
Use Cloudflare Access for sensitive services
Implement rate limiting
Log all access attempts

n8n AI Automation System

Wed, 10 Apr 2024 00:00:00 +0000

Building an AI-powered automation system using n8n for security operations and workflow management.

Overview

This system automates security tasks using n8n workflows, AI integrations, and various notification channels.

Key Components

n8n Engine: Core workflow automation
Telegram Bot: Alert notifications and commands
Webhook Triggers: Integration with external services
AI Processing: GPT-based analysis and responses

Workflow Examples

Security Alert Pipeline

Receive webhook from security tool
Parse alert data
Send to AI for classification
Route based on severity (Telegram/Email)
Log to database

Telegram Integration

// n8n Telegram node configuration
{
  chatId: process.env.TELEGRAM_CHAT_ID,
  text: "Security Alert: {{ $json.alert_type }}",
  parse_mode: "HTML"
}

Benefits

Automated incident response
Reduced manual monitoring
Faster alert routing
Integration with existing tools

JWT Security Analysis

Tue, 05 Mar 2024 00:00:00 +0000

Tools and techniques for analyzing JWT tokens for authentication vulnerabilities.

JWT Overview

JSON Web Tokens (JWT) are commonly used for authentication but can introduce security issues if not implemented correctly.

Common Vulnerabilities

Algorithm Confusion (alg: none)

# Exploit: Change alg to "none" and remove signature
header = {"alg": "none", "typ": "JWT"}
payload = {"sub": "1234567890", "role": "admin"}

Key Confusion (RS256 to HS256)

If the server uses RS256 but the library accepts HS256 with the public key as the secret.

Analysis Tools

JWT.io for manual inspection
Custom Python scripts for batch analysis
Burp Suite extension for runtime inspection

Validation Checklist

Verify signature with correct algorithm
Check token expiration (exp claim)
Validate audience (aud claim)
Ensure proper key management
Use strong secret keys (256-bit minimum)

Best Practices

Always validate algorithm expected by your application
Use asymmetric algorithms (RS256) when possible
Implement token rotation
Set appropriate expiration times