alt.hn

5/15/2026 at 2:53:53 PM

Show HN: Mezz, a curl-able WiFi sandbox for IoT pentesting

https://github.com/ABGEO/mezz

by ABGEO

5/18/2026 at 5:27:49 AM

I was confused what was curl-able about this and it just refers to being installable via “curl | sh”

by pimlottc

5/18/2026 at 9:33:35 AM

There's no `curl | sh` going on. "curl-able" means what it says: you curl down a single docker-compose file and run `docker compose up`. You don't clone the repo and you don't pipe anything into a shell. The whole point of the project is that it ships as one compose file you can fetch and run, which is why I called it curl-able.

I'm not sure how familiar you are with Docker and Docker Compose, but this is pretty common practice when you want to let people run a whole stack from a single compose file. If you have security concerns, you can (and always should) review the compose file and the Docker images to see what they do. Everything is available in the repo. But to actually run it, one curl is enough.

by ABGEO

5/18/2026 at 10:15:49 AM

> "curl-able" means what it says: you curl down a single docker-compose file

Are you familiar with the term "download"?

by thaumasiotes

5/18/2026 at 12:24:28 PM

Uh, being easy to transport makes it portable. "curl-able" is so freaking ambiguous

by LoganDark

5/18/2026 at 7:35:49 AM

curl | bash and pentesting go well together

by redrove

5/18/2026 at 8:27:42 AM

This is very interesting - instead of curl you can integrate https://voiden.md/ maybe.

by dhruv3006

5/18/2026 at 9:49:18 AM

[dead]

by ABGEO

5/18/2026 at 5:17:42 AM

Would be nice to have this for an AP running OpenWRT which should already be 90% of the way.

by teiferer

5/18/2026 at 9:43:43 AM

Thanks for the suggestion. If you mean running the project on a "real" router with OpenWRT, then the project is not really for that purpose. OpenWRT already gives you everything you need to achieve the same thing. The idea of Mezz is that it runs on any Linux device, like a laptop or a Raspberry Pi, if you don't have a router or don't want to work with one.

by ABGEO

5/18/2026 at 11:27:09 AM

Cool stuff! GH star added.

by bigger_fish

5/18/2026 at 6:45:20 PM

Thank you!

by ABGEO

5/18/2026 at 1:52:08 PM

[dead]

by okandship