blitzstrike 1.1.4 → 1.1.5

package/CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to Blitz Strike are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [1.1.5] — 2026-09-13
+
+### Expanded — full Awesome-Hacking resource index (78 entries, 44 domains)
+
+- `resources.json` expanded from 30 (web/pentest subset) to 78 entries covering
+  every domain in the Awesome-Hacking meta-list: web, api, pentest, recon,
+  payload, cve, privesc, source, fuzzing, llm, framework, osint, rev, cracking,
+  forensics, malware, ir, intel, cicd, devsecops, defense, knowledge, labs, ctf,
+  mobile, iot, ics, vehicle, drone, cellular, rtc, mainframe, rf, physical,
+  social, web3, crypto, exploit, network, tool, ... — each tagged with use_when.
+
 ## [1.1.4] — 2026-09-13
 
 ### Added — OWASP Web Top 10 + ASVS (complete taxonomy)

package/dist/index.js

@@ -54378,8 +54378,8 @@ ${statusLine}` : statusLine },
     return { content: [{ type: "text", text: JSON.stringify(frameworkTricks(framework)) }] };
   });
   server.registerTool("resource_lookup", {
-    title: "Curated security resource index",
-    description: "INTEL: return curated domain-specific security resources (the community Awesome-Hacking index, filtered to web/pentest relevance) — each with name, URL, description, and use_when (which phase/context it serves). Search by category (web, pentest, bug_bounty, api, recon, payload, cve, privesc, source, fuzzing, llm, framework, osint, rev, cracking, forensics, malware, ir, intel, cicd, knowledge, labs) or keyword. Use to find the best domain-specific tools/knowledge when Blitz Strike's own data doesn't cover it.",
+    title: "Curated security resource index (all domains)",
+    description: "INTEL: return the FULL curated security resource index (78 entries, 44 domains — every entry from the community Awesome-Hacking meta-list: web, api, pentest, recon, payload, cve, privesc, source, fuzzing, llm, framework, osint, rev, cracking, forensics, malware, ir, intel, cicd, devsecops, defense, knowledge, labs, ctf, mobile, iot, ics, vehicle, drone, cellular, rtc, mainframe, rf, physical, social, web3, ...). Each has name, URL, description, and use_when. Search by category or keyword to find the best domain-specific tools/knowledge for ANY target.",
     inputSchema: {
       category: string2().optional().describe("Optional category id or keyword (e.g. 'web', 'payload', 'recon', 'privesc').")
     }

package/intelligence/resources.json

@@ -1,35 +1,83 @@
 {
-  "_comment": "Curated security resource index (from the community 'Awesome Hacking' meta-list, filtered to what matters for web/pentest bug hunting). The LLM uses this to find the best domain-specific tools/knowledge. use_when maps each resource to a Blitz Strike phase/context.",
+  "_comment": "Full curated security resource index — EVERY entry from the community Awesome-Hacking meta-list, not just the web/pentest subset. Each tagged with category + use_when so the LLM can reach the right domain-specific resource for ANY target. Search by category or keyword.",
   "resources": [
-    {"id": "web_hacking", "name": "awesome-web-hacking", "category": "web", "url": "https://github.com/infoslack/awesome-web-hacking", "desc": "Web application security tools and techniques.", "use_when": "live web app testing — the master web list"},
+    {"id": "web_hacking", "name": "awesome-web-hacking", "category": "web", "url": "https://github.com/infoslack/awesome-web-hacking", "desc": "Web application security tools and techniques.", "use_when": "live web app testing"},
     {"id": "web_security", "name": "awesome-web-security", "category": "web", "url": "https://github.com/qazbnm456/awesome-web-security", "desc": "Web security materials and resources.", "use_when": "web security research + writeups"},
+    {"id": "web3_security", "name": "Awesome-web3-Security", "category": "web3", "url": "https://github.com/Anugrahsr/Awesome-web3-Security", "desc": "Web3/smart-contract security materials for pentesters and bug hunters.", "use_when": "web3/blockchain target"},
     {"id": "pentest", "name": "awesome-pentest", "category": "pentest", "url": "https://github.com/enaqx/awesome-pentest", "desc": "Penetration testing resources, tools, and references.", "use_when": "broad pentest tooling + methodology"},
+    {"id": "redteam_toolkit", "name": "Red-Teaming-Toolkit", "category": "redteam", "url": "https://github.com/infosecn1nja/Red-Teaming-Toolkit", "desc": "Cutting-edge open-source tools for red teamers and threat hunters.", "use_when": "red team / adversarial emulation"},
     {"id": "bug_bounty", "name": "awesome-bug-bounty", "category": "bug_bounty", "url": "https://github.com/djadmin/awesome-bug-bounty", "desc": "Bug bounty programs and hunter write-ups.", "use_when": "bug bounty target selection + report style"},
     {"id": "bug_bounty_reference", "name": "bug-bounty-reference", "category": "bug_bounty", "url": "https://github.com/ngalongc/bug-bounty-reference", "desc": "Write-ups categorized by bug nature.", "use_when": "seeing how a bug class was exploited in the wild"},
     {"id": "api_checklist", "name": "API-Security-Checklist", "category": "api", "url": "https://github.com/shieldfy/API-Security-Checklist", "desc": "API security countermeasures checklist.", "use_when": "API/GraphQL security testing"},
     {"id": "asset_discovery", "name": "Awesome-Asset-Discovery", "category": "recon", "url": "https://github.com/redhuntlabs/Awesome-Asset-Discovery", "desc": "Asset discovery / attack-surface enumeration resources.", "use_when": "recon — mapping the full attack surface"},
+    {"id": "osint", "name": "awesome-osint", "category": "osint", "url": "https://github.com/jivoi/awesome-osint", "desc": "OSINT tools and resources.", "use_when": "OSINT / passive recon"},
     {"id": "payloads_foospidy", "name": "payloads", "category": "payload", "url": "https://github.com/foospidy/payloads", "desc": "Web attack payloads collection.", "use_when": "crafting probes"},
-    {"id": "payloads_all_the_things", "name": "PayloadsAllTheThings", "category": "payload", "url": "https://github.com/swisskyrepo/PayloadsAllTheThings", "desc": "Payloads + bypass for web app pentest/CTF (already vendored as payloads/).", "use_when": "crafting probes"},
+    {"id": "payloads_all_the_things", "name": "PayloadsAllTheThings", "category": "payload", "url": "https://github.com/swisskyrepo/PayloadsAllTheThings", "desc": "Payloads + bypass for web app pentest/CTF (vendored as payloads/).", "use_when": "crafting probes"},
     {"id": "seclists", "name": "SecLists", "category": "payload", "url": "https://github.com/danielmiessler/SecLists", "desc": "Wordlists + fuzz lists for security assessments.", "use_when": "fuzzing + brute-force lists"},
+    {"id": "probable_wordlists", "name": "Probable-Wordlists", "category": "payload", "url": "https://github.com/berzerk0/Probable-Wordlists", "desc": "Wordlists sorted by probability for password testing.", "use_when": "password cracking / credential testing"},
     {"id": "cve_poc", "name": "trickest/cve", "category": "cve", "url": "https://github.com/trickest/cve", "desc": "CVE Proof-of-Concepts updated daily.", "use_when": "finding a PoC for a known CVE"},
     {"id": "gtfobins", "name": "GTFOBins", "category": "privesc", "url": "https://gtfobins.github.io", "desc": "Unix binaries exploitable to bypass local restrictions.", "use_when": "Linux privilege escalation"},
     {"id": "static_analysis", "name": "static-analysis", "category": "source", "url": "https://github.com/analysis-tools-dev/static-analysis", "desc": "Static analysis tools, linters, and checkers per language.", "use_when": "source-code audit tool selection"},
     {"id": "fuzzing", "name": "Awesome-Fuzzing", "category": "fuzzing", "url": "https://github.com/secfigo/Awesome-Fuzzing", "desc": "Fuzzing resources + exploit-development learning.", "use_when": "input fuzzing / crash analysis"},
     {"id": "prompt_injection", "name": "awesome-prompt-injection", "category": "llm", "url": "https://github.com/Joe-B-Security/awesome-prompt-injection", "desc": "Prompt-injection vulnerabilities targeting AI/LLM systems.", "use_when": "testing LLM/AI-integrated targets"},
+    {"id": "ai_security", "name": "Awesome-AI-Security", "category": "llm", "url": "https://github.com/DeepSpaceHarbor/Awesome-AI-Security", "desc": "AI security resources.", "use_when": "AI/LLM system security"},
     {"id": "nodejs_security", "name": "awesome-nodejs-security", "category": "framework", "url": "https://github.com/lirantal/awesome-nodejs-security", "desc": "Node.js security tools + incidents.", "use_when": "Node/Express target"},
     {"id": "php_security", "name": "awesome-php#security", "category": "framework", "url": "https://github.com/ziadoz/awesome-php#security", "desc": "PHP security libraries + scanners.", "use_when": "PHP target"},
-    {"id": "osint", "name": "awesome-osint", "category": "recon", "url": "https://github.com/jivoi/awesome-osint", "desc": "OSINT tools and resources.", "use_when": "OSINT / passive recon"},
     {"id": "reversing", "name": "awesome-reversing", "category": "rev", "url": "https://github.com/HACKE-RC/awesome-reversing", "desc": "Reverse engineering learning resources.", "use_when": "binary RE"},
+    {"id": "re_reading_list", "name": "reverseengineering-reading-list", "category": "rev", "url": "https://github.com/onethawt/reverseengineering-reading-list", "desc": "RE articles, books, and papers.", "use_when": "deep RE learning"},
+    {"id": "executable_packing", "name": "awesome-executable-packing", "category": "rev", "url": "https://github.com/packing-box/awesome-executable-packing", "desc": "Executable packing/unpacking resources.", "use_when": "packed malware/binary analysis"},
     {"id": "password_cracking", "name": "awesome-password-cracking", "category": "cracking", "url": "https://github.com/n0kovo/awesome-password-cracking", "desc": "Password recovery tools + resources.", "use_when": "hash cracking"},
+    {"id": "crypto", "name": "awesome-cryptography", "category": "crypto", "url": "https://github.com/sobolevn/awesome-cryptography", "desc": "Cryptography resources and tools.", "use_when": "crypto analysis / implementation review"},
     {"id": "forensics", "name": "awesome-forensics", "category": "forensics", "url": "https://github.com/Cugu/awesome-forensics", "desc": "Forensic analysis tools.", "use_when": "forensics / incident analysis"},
     {"id": "malware_analysis", "name": "awesome-malware-analysis", "category": "malware", "url": "https://github.com/rshipp/awesome-malware-analysis", "desc": "Malware analysis tools.", "use_when": "malware triage (static + IOC)"},
+    {"id": "malware_persistence", "name": "awesome-malware-persistence", "category": "malware", "url": "https://github.com/Karneades/awesome-malware-persistence", "desc": "Adversary persistence techniques.", "use_when": "malware persistence / detection"},
+    {"id": "yara", "name": "awesome-yara", "category": "malware", "url": "https://github.com/InQuest/awesome-yara", "desc": "YARA rules, tools, and people.", "use_when": "malware signature / IOC matching"},
     {"id": "incident_response", "name": "awesome-incident-response", "category": "ir", "url": "https://github.com/meirwah/awesome-incident-response", "desc": "Incident response tools.", "use_when": "incident response"},
     {"id": "threat_intel", "name": "awesome-threat-intelligence", "category": "intel", "url": "https://github.com/hslatman/awesome-threat-intelligence", "desc": "Threat intelligence resources.", "use_when": "attribution / threat research"},
+    {"id": "ioc", "name": "awesome-iocs", "category": "intel", "url": "https://github.com/sroberts/awesome-iocs", "desc": "Indicators of compromise sources.", "use_when": "IOC hunting"},
+    {"id": "apt_notes", "name": "APTnotes", "category": "intel", "url": "https://github.com/kbandla/APTnotes", "desc": "Public docs/whitepapers on APT campaigns.", "use_when": "APT research"},
     {"id": "ci_cd_attacks", "name": "awesome-cicd-attacks", "category": "cicd", "url": "https://github.com/TupleType/awesome-cicd-attacks", "desc": "CI/CD pipeline offensive research.", "use_when": "CI/CD + deployment-process testing"},
+    {"id": "devsecops", "name": "awesome-devsecops", "category": "devsecops", "url": "https://github.com/devsecops/awesome-devsecops", "desc": "DevSecOps tools.", "use_when": "DevSecOps / shift-left security"},
+    {"id": "detection_engineering", "name": "awesome-detection-engineering", "category": "defense", "url": "https://github.com/infosecB/awesome-detection-engineering", "desc": "Detective control design resources.", "use_when": "building/detecting detection coverage"},
+    {"id": "honeypots", "name": "awesome-honeypots", "category": "defense", "url": "https://github.com/paralax/awesome-honeypots", "desc": "Honeypot resources.", "use_when": "deception / attacker engagement"},
+    {"id": "suricata", "name": "awesome-suricata", "category": "defense", "url": "https://github.com/satta/awesome-suricata", "desc": "Suricata IDS/IPS monitoring resources.", "use_when": "network detection / IDS rules"},
+    {"id": "threathunter_playbook", "name": "ThreatHunter-Playbook", "category": "defense", "url": "https://github.com/OTRF/ThreatHunter-Playbook", "desc": "Threat hunting playbook.", "use_when": "threat hunting"},
     {"id": "pentest_wiki", "name": "pentest-wiki", "category": "knowledge", "url": "https://github.com/nixawk/pentest-wiki", "desc": "Free online security knowledge library.", "use_when": "technique reference"},
     {"id": "infosec_reference", "name": "Infosec_Reference", "category": "knowledge", "url": "https://github.com/rmusser01/Infosec_Reference", "desc": "Information security reference that doesn't suck.", "use_when": "broad infosec reference"},
     {"id": "cheatsheets", "name": "OWASP CheatSheetSeries", "category": "knowledge", "url": "https://github.com/OWASP/CheatSheetSeries", "desc": "OWASP cheat sheets for app security.", "use_when": "defensive/context reference"},
+    {"id": "cybersources", "name": "CyberSources", "category": "knowledge", "url": "https://github.com/bst04/CyberSources", "desc": "All types of cybersecurity tools + resources.", "use_when": "general tool discovery"},
+    {"id": "sec_talks", "name": "awesome-sec-talks", "category": "knowledge", "url": "https://github.com/PaulSec/awesome-sec-talks", "desc": "Security talks.", "use_when": "learning from conference talks"},
+    {"id": "h4cker", "name": "h4cker (Art of Hacking)", "category": "knowledge", "url": "https://github.com/The-Art-of-Hacking/h4cker", "desc": "Thousands of cybersecurity references.", "use_when": "broad security learning"},
+    {"id": "cyber_university", "name": "awesome-cyber-security-university", "category": "knowledge", "url": "https://github.com/brootware/awesome-cyber-security-university", "desc": "Free learn-by-doing cybersecurity education.", "use_when": "learning paths"},
+    {"id": "cyber_skills", "name": "awesome-cyber-skills", "category": "labs", "url": "https://github.com/joe-shenouda/awesome-cyber-skills", "desc": "Legal/safe training environments.", "use_when": "hands-on practice labs"},
+    {"id": "hacker101", "name": "hacker101", "category": "knowledge", "url": "https://github.com/Hacker0x01/hacker101", "desc": "Free web security class (HackerOne).", "use_when": "web security learning"},
+    {"id": "infosec_getting_started", "name": "infosec_getting_started", "category": "knowledge", "url": "https://github.com/gradiuscypher/infosec_getting_started", "desc": "Getting-started infosec resources.", "use_when": "onboarding / fundamentals"},
+    {"id": "free_programming_books", "name": "free-programming-books", "category": "knowledge", "url": "https://github.com/EbookFoundation/free-programming-books", "desc": "Free programming books.", "use_when": "programming reference"},
+    {"id": "appsec", "name": "awesome-appsec", "category": "appsec", "url": "https://github.com/paragonie/awesome-appsec", "desc": "Application security learning resources.", "use_when": "appsec fundamentals + defense"},
     {"id": "vulhub", "name": "vulhub", "category": "labs", "url": "https://github.com/vulhub/vulhub", "desc": "Pre-built vulnerable Docker environments.", "use_when": "spinning up a vulnerable lab to reproduce a bug"},
-    {"id": "ai_security", "name": "Awesome-AI-Security", "category": "llm", "url": "https://github.com/DeepSpaceHarbor/Awesome-AI-Security", "desc": "AI security resources.", "use_when": "AI/LLM system security"}
+    {"id": "detection_lab", "name": "DetectionLab", "category": "labs", "url": "https://github.com/clong/DetectionLab", "desc": "Vagrant/Packer lab with security tooling.", "use_when": "building a detection lab"},
+    {"id": "capsulecorp", "name": "capsulecorp-pentest", "category": "labs", "url": "https://github.com/r3dy/capsulecorp-pentest", "desc": "Vagrant+Ansible pentest lab.", "use_when": "building a network pentest lab"},
+    {"id": "ctf", "name": "awesome-ctf", "category": "ctf", "url": "https://github.com/apsdehal/awesome-ctf", "desc": "CTF frameworks, libraries, and software.", "use_when": "CTF challenge solving"},
+    {"id": "mobile_android", "name": "android-security-awesome", "category": "mobile", "url": "https://github.com/ashishb/android-security-awesome", "desc": "Android security resources.", "use_when": "Android app testing"},
+    {"id": "mobile_ios", "name": "osx-and-ios-security-awesome", "category": "mobile", "url": "https://github.com/ashishb/osx-and-ios-security-awesome", "desc": "OSX and iOS security tools.", "use_when": "iOS/macOS testing"},
+    {"id": "iot_embedded", "name": "awesome-embedded-and-iot-security", "category": "iot", "url": "https://github.com/fkie-cad/awesome-embedded-and-iot-security", "desc": "Embedded and IoT security resources.", "use_when": "embedded/IoT target"},
+    {"id": "iot_hardware", "name": "awesome-iot-and-hardware-security", "category": "iot", "url": "https://github.com/kayranfatih/awesome-iot-and-hardware-security", "desc": "IoT and hardware security tools/books.", "use_when": "hardware/IoT target"},
+    {"id": "ics", "name": "awesome-industrial-control-system-security", "category": "ics", "url": "https://github.com/hslatman/awesome-industrial-control-system-security", "desc": "ICS/SCADA security resources.", "use_when": "ICS/OT target"},
+    {"id": "vehicle", "name": "awesome-vehicle-security", "category": "vehicle", "url": "https://github.com/jaredthecoder/awesome-vehicle-security", "desc": "Vehicle security + car hacking.", "use_when": "vehicle/car hacking target"},
+    {"id": "drone", "name": "Awesome-Drone-Hacking", "category": "drone", "url": "https://github.com/nicholasaleks/Awesome-Drone-Hacking", "desc": "Drone hacking tools.", "use_when": "drone security target"},
+    {"id": "cellular", "name": "Awesome-Cellular-Hacking", "category": "cellular", "url": "https://github.com/W00t3k/Awesome-Cellular-Hacking", "desc": "3G/4G/5G cellular security research.", "use_when": "cellular/telecom research"},
+    {"id": "rtc", "name": "awesome-rtc-hacking", "category": "rtc", "url": "https://github.com/EnableSecurity/awesome-rtc-hacking", "desc": "VoIP/WebRTC/VoLTE security.", "use_when": "VoIP/WebRTC target"},
+    {"id": "mainframe", "name": "Awesome-Mainframe-Hacking", "category": "mainframe", "url": "https://github.com/samanL33T/Awesome-Mainframe-Hacking", "desc": "Mainframe hacking/pentest resources.", "use_when": "mainframe target"},
+    {"id": "rfsec", "name": "RFSec-ToolKit", "category": "rf", "url": "https://github.com/cn0xroot/RFSec-ToolKit", "desc": "RF communication protocol hacktools.", "use_when": "RF/SDR target"},
+    {"id": "physical", "name": "RedTeam-Physical-Tools", "category": "physical", "url": "https://github.com/DavidProbinsky/RedTeam-Physical-Tools", "desc": "Physical security / covert entry tools.", "use_when": "physical red team"},
+    {"id": "social_engineering", "name": "awesome-social-engineering", "category": "social", "url": "https://github.com/giuliacassara/awesome-social-engineering", "desc": "Social engineering resources.", "use_when": "social engineering"},
+    {"id": "tor", "name": "awesome-tor", "category": "network", "url": "https://github.com/polycarbohydrate/awesome-tor", "desc": "Tor network + anonymous communication.", "use_when": "anonymity / Tor research"},
+    {"id": "pcaptools", "name": "awesome-pcaptools", "category": "network", "url": "https://github.com/caesar0301/awesome-pcaptools", "desc": "Network trace processing tools.", "use_when": "packet capture analysis"},
+    {"id": "linux_kernel", "name": "linux-kernel-exploitation", "category": "exploit", "url": "https://github.com/xairy/linux-kernel-exploitation", "desc": "Linux kernel fuzzing + exploitation links.", "use_when": "kernel exploitation"},
+    {"id": "ml_security", "name": "awesome-ml-for-cybersecurity", "category": "ml", "url": "https://github.com/jivoi/awesome-ml-for-cybersecurity", "desc": "ML for security tools/resources.", "use_when": "ML-based security analysis"},
+    {"id": "rl_security", "name": "awesome-rl-for-cybersecurity", "category": "ml", "url": "https://github.com/Kim-Hammar/awesome-rl-for-cybersecurity", "desc": "Reinforcement learning for security.", "use_when": "RL-based security research"},
+    {"id": "cyberchef", "name": "CyberChef", "category": "tool", "url": "https://gchq.github.io/CyberChef/", "desc": "Web app for analyzing/decoding data.", "use_when": "data encoding/decoding/deobfuscation"},
+    {"id": "shell", "name": "awesome-shell", "category": "tool", "url": "https://github.com/alebcay/awesome-shell", "desc": "CLI frameworks, toolkits, guides.", "use_when": "shell productivity"},
+    {"id": "annual_reports", "name": "awesome-annual-security-reports", "category": "knowledge", "url": "https://github.com/jacobdjwilson/awesome-annual-security-reports", "desc": "Annual security reports (trends).", "use_when": "industry trend research"}
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {