Author here - it's a freaking internal only tool, if you are exposing a PXE server to the outside world you get everything you deserve. What you are describing

Author here - it's a freaking internal only tool, if you are exposing a PXE server to the outside world you get everything you deserve. What you are describing can happen with any tool, iVentoy literally injects code into your images without you knowing as it's closed source. NetbootXYZ have crazy CI Pipelines and ansible to make it work. I tried to make it as single binary, open and single shot as possible.