kiosk-redteam

https://github.com/kiosk-hq/kiosk

kiosk-redteam drives hostile HTTP scenarios against a Kiosk origin that mounts the engine at /kiosk, and asserts each attack is correctly blocked — a deliberate refusal, never a crash and never a toll the harness could not settle. A scenario that finds a real breach fails loudly. Ships a Scenario/Verdict/Runner framework and a library of generic attack scenarios parameterised by a Profile of the origin. It attacks through the assistant client kiosk-test-support ships. `require "kiosk/redteam"` loads no Rails. Through kiosk-test-support, installing the gem installs Rails.