High-risk tools in Munin
8 of the 242 tools in Munin are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
conv_request_callbackExecutePlace an outbound phone call to the contact in this conversation. Use this only when the user has asked to be called — e.g. \
-
conv_retry_deliveryExecuteRe-queue the outbound delivery of an outgoing message that permanently failed to send. Outbound email and SMS are delivered by a background worker that retries five times with e...
-
conv_send_email_channel_testExecuteSend a real test email through this channel
-
conv_send_sms_channel_testExecuteSend a real test SMS through an SMS channel (Twilio, MessageBird), addressed to
-
conv_test_email_channelExecuteTest an email channel\
-
conv_test_voice_sms_channelExecuteVerify a voice or SMS channel’s stored credentials with its vendor (no message sent). The result shape is vendor-specific. Email channels are tested with conv_test_email_channel...
-
outreach_approve_proposalExecuteApprove one pending outreach proposal, authorizing it to go out: an initial proposal creates the outbound conversation and delivers the first touch on the campaign
-
seo_submit_urlsExecuteSubmit up to 500 URLs on a verified property to the search engine for (re)crawling, e.g. after publishing or updating a page. URLs must be under the property. Returns how many w...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.