blitzstrike 1.0.27 → 1.0.28

package/bench/corpus/java-command-injection-vuln.md

@@ -0,0 +1,7 @@
+- id: java-command-injection-vuln
+- language: java
+- vulnerable: true
+- sink_type: command_execution
+```java
+class A { void f() { String cmd = request.getParameter("cmd"); Runtime.getRuntime().exec(cmd); } }
+```

package/bench/corpus/js-sqli-vuln.md

@@ -0,0 +1,8 @@
+- id: js-sqli-vuln
+- language: javascript
+- vulnerable: true
+- sink_type: sql_execution
+```javascript
+const id = req.query.id;
+db.query("SELECT * FROM t WHERE id=" + id);
+```

package/bench/corpus/js-xss-sanitized.md

@@ -0,0 +1,8 @@
+- id: js-xss-sanitized
+- language: javascript
+- vulnerable: false
+- sink_type: html_render
+```javascript
+const x = req.query.x;
+res.send(escapeHtml(x));
+```

package/bench/corpus/php-command-injection-vuln.md

@@ -0,0 +1,9 @@
+- id: php-command-injection-vuln
+- language: php
+- vulnerable: true
+- sink_type: command_execution
+```php
+<?php
+$cmd = $_GET["cmd"];
+system($cmd);
+```

package/bench/corpus/php-file-upload-vuln.md

@@ -0,0 +1,9 @@
+- id: php-file-upload-vuln
+- language: php
+- vulnerable: true
+- sink_type: file_operations
+```php
+<?php
+$file = $_FILES["upload"];
+move_uploaded_file($file["tmp_name"], "/uploads/" . $file["name"]);
+```

package/bench/corpus/php-sqli-prepared.md

@@ -0,0 +1,9 @@
+- id: php-sqli-prepared
+- language: php
+- vulnerable: false
+- sink_type: sql_execution
+```php
+<?php
+$id = $_GET["id"];
+$wpdb->query($wpdb->prepare("SELECT * FROM t WHERE id=%d", $id));
+```

package/bench/corpus/php-sqli-vuln.md

@@ -0,0 +1,9 @@
+- id: php-sqli-vuln
+- language: php
+- vulnerable: true
+- sink_type: sql_execution
+```php
+<?php
+$id = $_GET["id"];
+$wpdb->query("SELECT * FROM t WHERE id=$id");
+```

package/bench/corpus/php-xss-sanitized.md

@@ -0,0 +1,9 @@
+- id: php-xss-sanitized
+- language: php
+- vulnerable: false
+- sink_type: html_render
+```php
+<?php
+$name = $_GET["name"];
+echo htmlspecialchars($name);
+```

package/bench/corpus/py-command-injection-sanitized.md

@@ -0,0 +1,9 @@
+- id: py-command-injection-sanitized
+- language: python
+- vulnerable: false
+- sink_type: command_execution
+```python
+import os, shlex
+x = request.args.get("cmd")
+os.system(shlex.quote(x))
+```

package/bench/corpus/py-command-injection-vuln.md

@@ -0,0 +1,9 @@
+- id: py-command-injection-vuln
+- language: python
+- vulnerable: true
+- sink_type: command_execution
+```python
+import os
+x = request.args.get("cmd")
+os.system(x)
+```

package/dist/index.js

@@ -50593,6 +50593,7 @@ function reportJson(findings, opts = {}) {
 import { readFileSync as readFileSync9, readdirSync as readdirSync4, writeFileSync as writeFileSync2, rmSync } from "node:fs";
 import { join as join7 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
+import { tmpdir } from "node:os";
 var ROOT4 = join7(fileURLToPath5(new URL(".", import.meta.url)), "..");
 var CORPUS = join7(ROOT4, "bench", "corpus");
 function parseCorpusFile(path) {
@@ -50660,7 +50661,7 @@ function loadCorpus() {
 function detect(entry) {
   const lang = entry.language;
   if (lang === "php") {
-    const tmp = join7(ROOT4, "bench", ".tmp.php");
+    const tmp = join7(tmpdir(), `blitzstrike-bench-${entry.id}-${process.pid}.php`);
     writeFileSync2(tmp, entry.code);
     const r = analyzeTaint(tmp);
     rmSync(tmp, { force: true });

package/package.json

@@ -1,27 +1,28 @@
 {
   "name": "blitzstrike",
-  "version": "1.0.27",
+  "version": "1.0.28",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {
     "blitzstrike": "dist/index.js"
   },
   "files": [
-    "dist",
-    "chains.json",
-    "tools-catalog.json",
-    "intelligence",
-    "skills",
-    "manuals",
-    "opencode-agents",
-    "LICENSE",
-    "README.md",
     "CHANGELOG.md",
     "CONTRIBUTING.md",
-    "SECURITY.md",
+    "LICENSE",
+    "README.md",
     "ROADMAP.md",
+    "SECURITY.md",
     "THIRD-PARTY-NOTICES.md",
-    "docs"
+    "bench",
+    "chains.json",
+    "dist",
+    "docs",
+    "intelligence",
+    "manuals",
+    "opencode-agents",
+    "skills",
+    "tools-catalog.json"
   ],
   "scripts": {
     "build": "bun build src/index.ts --outdir dist --target node --format esm",