blitzstrike 1.0.29 → 1.0.30

package/README.md

@@ -228,10 +228,10 @@ MCP servers. With no client detected, it prints the snippet for manual paste.
 | `attack_vectors(category)` | Enumerate the vector list for one category (e.g. ssrf, business logic, ai/llm). |
 
 The intelligence layer (WAF signatures, tech/CVE/port correlations, fuzzer
-data, vuln ontology, exploit payloads, nuclei detection templates, attack-vector
-taxonomy) is sourced
+data, vuln ontology, exploit payloads, nuclei detection templates) is sourced
 from airecon (MIT), PayloadsAllTheThings (MIT), and nuclei-templates (MIT) —
-loaded at runtime and wired into the tool surface above.
+loaded at runtime and wired into the tool surface above. The attack-vector
+taxonomy (`intelligence/attack_vectors.json`) is first-party.
 
 317 indexed tool manuals + 17 playbooks from kali-pentest (Apache-2.0) — 334
 manual files, 100% of the 130-tool catalog documented. These are NOT

package/THIRD-PARTY-NOTICES.md

@@ -48,13 +48,6 @@ satisfies the attribution requirements of those licenses.
 - **License:** MIT
 - **Used for:** ~11.9k YAML detection templates (`templates/`) + `cves.json`.
 
-## attack-vector taxonomy
-
-- **Source:** https://x0.at/Lqa2.txt (curated public list)
-- **License:** generic security terminology (OWASP/CWE-style attack-vector names)
-- **Used for:** `intelligence/attack_vectors.json` — a 34-category / 588-vector
-  taxonomy of web attack vectors for attack-surface mapping (BLITZ tier).
-
 ---
 
 All other code, chains, and data in this project are written by shinthink

package/intelligence/attack_vectors.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "Web attack vector taxonomy — master reference for attack-surface mapping (BLITZ tier). Generic security terminology (OWASP/CWE-style attack vector names) grouped into 34 categories. Source: https://x0.at/Lqa2.txt (curated public list).",
+  "_comment": "Web attack vector taxonomy — master reference for attack-surface mapping (BLITZ tier). 34 categories of generic security terminology (OWASP/CWE-style attack vector names).",
   "version": 1,
   "categories": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "1.0.29",
+  "version": "1.0.30",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {