blitzstrike 1.7.0 → 1.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,23 @@ All notable changes to Blitz Strike are documented here.
5
5
  The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/).
7
7
 
8
+ ## [1.8.0] — 2026-09-14
9
+
10
+ ### Fixed — manuals data layer not bundled in npm tarball
11
+
12
+ - `manuals-index.json` was missing from the package `files` list, so
13
+ `list_manuals` / `read_tool_manual` / `read_playbook` returned empty from an
14
+ npm install (the 317 manuals + 17 playbooks were not indexed). Added the
15
+ index file to the tarball.
16
+
17
+ ## [1.7.1] — 2026-09-14
18
+
19
+ ### Fixed — npm publish (dist-tag + staged-version)
20
+
21
+ - Republish with the `latest` dist-tag corrected (previous publishes left
22
+ `latest` pinned to 1.0.95) and a clean tarball (1.6.0/1.7.0 were stuck in a
23
+ staged state).
24
+
8
25
  ## [1.7.0] — 2026-09-13
9
26
 
10
27
  ### Added — advanced deterministic checks (live + source)
@@ -0,0 +1,340 @@
1
+ {
2
+ "tools": {
3
+ "rainbowcrack": "password/rainbowcrack.md",
4
+ "patator": "password/patator.md",
5
+ "hashid": "password/hashid.md",
6
+ "chntpw": "password/chntpw.md",
7
+ "responder": "password/responder.md",
8
+ "medusa": "password/medusa.md",
9
+ "name-that-hash": "password/name-that-hash.md",
10
+ "netexec": "password/netexec.md",
11
+ "changeme": "password/changeme.md",
12
+ "hydra": "password/hydra.md",
13
+ "ncrack": "password/ncrack.md",
14
+ "hashcat": "password/hashcat.md",
15
+ "pdfcrack": "password/pdfcrack.md",
16
+ "brutespray": "password/brutespray.md",
17
+ "crunch": "password/crunch.md",
18
+ "crowbar": "password/crowbar.md",
19
+ "cewl": "password/cewl.md",
20
+ "gpp-decrypt": "password/gpp-decrypt.md",
21
+ "kerbrute": "password/kerbrute.md",
22
+ "john": "password/john.md",
23
+ "fcrackzip": "password/fcrackzip.md",
24
+ "opensc-tool": "rfid-nfc/opensc-tool.md",
25
+ "pkcs15-tool": "rfid-nfc/pkcs15-tool.md",
26
+ "proxmark3": "rfid-nfc/proxmark3.md",
27
+ "scriptor": "rfid-nfc/scriptor.md",
28
+ "libnfc": "rfid-nfc/libnfc.md",
29
+ "bettercap": "sniffing-spoofing/bettercap.md",
30
+ "ngrep": "sniffing-spoofing/ngrep.md",
31
+ "hping3": "sniffing-spoofing/hping3.md",
32
+ "sslstrip": "sniffing-spoofing/sslstrip.md",
33
+ "dsniff": "sniffing-spoofing/dsniff.md",
34
+ "dnschef": "sniffing-spoofing/dnschef.md",
35
+ "ettercap": "sniffing-spoofing/ettercap.md",
36
+ "macchanger": "sniffing-spoofing/macchanger.md",
37
+ "netsniff-ng": "sniffing-spoofing/netsniff-ng.md",
38
+ "scapy": "sniffing-spoofing/scapy.md",
39
+ "dploot": "post-exploitation/dploot.md",
40
+ "proxychains": "post-exploitation/proxychains.md",
41
+ "bloodyad": "post-exploitation/bloodyad.md",
42
+ "pspy": "post-exploitation/pspy.md",
43
+ "winpeas": "post-exploitation/winpeas.md",
44
+ "certipy-ad": "post-exploitation/certipy-ad.md",
45
+ "sliver": "post-exploitation/sliver.md",
46
+ "lapsdumper": "post-exploitation/lapsdumper.md",
47
+ "sshuttle": "post-exploitation/sshuttle.md",
48
+ "lsassy": "post-exploitation/lsassy.md",
49
+ "dnscat2": "post-exploitation/dnscat2.md",
50
+ "hekatomb": "post-exploitation/hekatomb.md",
51
+ "linpeas": "post-exploitation/linpeas.md",
52
+ "linux-exploit-suggester": "post-exploitation/linux-exploit-suggester.md",
53
+ "powershell-empire": "post-exploitation/powershell-empire.md",
54
+ "pwncat": "post-exploitation/pwncat.md",
55
+ "bloodhound.py": "post-exploitation/bloodhound.py.md",
56
+ "krbrelayx": "post-exploitation/krbrelayx.md",
57
+ "powersploit": "post-exploitation/powersploit.md",
58
+ "havoc": "post-exploitation/havoc.md",
59
+ "bloodhound": "post-exploitation/bloodhound.md",
60
+ "mimikatz": "post-exploitation/mimikatz.md",
61
+ "scoutsuite": "cloud-native/scoutsuite.md",
62
+ "docker-bench-security": "cloud-native/docker-bench-security.md",
63
+ "kubescape": "cloud-native/kubescape.md",
64
+ "peirates": "cloud-native/peirates.md",
65
+ "azurehound": "cloud-native/azurehound.md",
66
+ "pacu": "cloud-native/pacu.md",
67
+ "kube-bench": "cloud-native/kube-bench.md",
68
+ "prowler": "cloud-native/prowler.md",
69
+ "stegseek": "forensics/stegseek.md",
70
+ "dc3dd": "forensics/dc3dd.md",
71
+ "bulk-extractor": "forensics/bulk-extractor.md",
72
+ "chkrootkit": "forensics/chkrootkit.md",
73
+ "rkhunter": "forensics/rkhunter.md",
74
+ "steghide": "forensics/steghide.md",
75
+ "tcpdump": "forensics/tcpdump.md",
76
+ "scalpel": "forensics/scalpel.md",
77
+ "chainsaw": "forensics/chainsaw.md",
78
+ "hashdeep": "forensics/hashdeep.md",
79
+ "exiftool": "forensics/exiftool.md",
80
+ "foremost": "forensics/foremost.md",
81
+ "ssdeep": "forensics/ssdeep.md",
82
+ "ddrescue": "forensics/ddrescue.md",
83
+ "yara": "forensics/yara.md",
84
+ "tshark": "forensics/tshark.md",
85
+ "testdisk": "forensics/testdisk.md",
86
+ "plaso": "forensics/plaso.md",
87
+ "tcpflow": "forensics/tcpflow.md",
88
+ "dcfldd": "forensics/dcfldd.md",
89
+ "sleuthkit": "forensics/sleuthkit.md",
90
+ "regripper": "forensics/regripper.md",
91
+ "volatility": "forensics/volatility.md",
92
+ "report-template": "reporting/report-template.md",
93
+ "pandoc": "reporting/pandoc.md",
94
+ "trivy": "vulnerability/trivy.md",
95
+ "openvas": "vulnerability/openvas.md",
96
+ "smbmap": "vulnerability/smbmap.md",
97
+ "enum4linux": "vulnerability/enum4linux.md",
98
+ "ismtp": "vulnerability/ismtp.md",
99
+ "snmpwalk": "vulnerability/snmpwalk.md",
100
+ "sslscan": "vulnerability/sslscan.md",
101
+ "swaks": "vulnerability/swaks.md",
102
+ "lynis": "vulnerability/lynis.md",
103
+ "nuclei": "vulnerability/nuclei.md",
104
+ "snmpcheck": "vulnerability/snmpcheck.md",
105
+ "ike-scan": "vulnerability/ike-scan.md",
106
+ "smtp-user-enum": "vulnerability/smtp-user-enum.md",
107
+ "sslyze": "vulnerability/sslyze.md",
108
+ "enum4linux-ng": "vulnerability/enum4linux-ng.md",
109
+ "onesixtyone": "vulnerability/onesixtyone.md",
110
+ "testssl.sh": "vulnerability/testssl.sh.md",
111
+ "nikto": "web/nikto.md",
112
+ "subjack": "web/subjack.md",
113
+ "padbuster": "web/padbuster.md",
114
+ "gitleaks": "web/gitleaks.md",
115
+ "websocat": "web/websocat.md",
116
+ "arjun": "web/arjun.md",
117
+ "schemathesis": "web/schemathesis.md",
118
+ "feroxbuster": "web/feroxbuster.md",
119
+ "zaproxy": "web/zaproxy.md",
120
+ "sstimap": "web/sstimap.md",
121
+ "jwt_tool": "web/jwt_tool.md",
122
+ "mitmproxy": "web/mitmproxy.md",
123
+ "weevely": "web/weevely.md",
124
+ "tinja": "web/tinja.md",
125
+ "graphw00f": "web/graphw00f.md",
126
+ "dalfox": "web/dalfox.md",
127
+ "wfuzz": "web/wfuzz.md",
128
+ "cmseek": "web/cmseek.md",
129
+ "phpggc": "web/phpggc.md",
130
+ "ffuf": "web/ffuf.md",
131
+ "joomscan": "web/joomscan.md",
132
+ "katana": "web/katana.md",
133
+ "crlfuzz": "web/crlfuzz.md",
134
+ "grpcurl": "web/grpcurl.md",
135
+ "wpscan": "web/wpscan.md",
136
+ "wapiti": "web/wapiti.md",
137
+ "dirsearch": "web/dirsearch.md",
138
+ "dirb": "web/dirb.md",
139
+ "clairvoyance": "web/clairvoyance.md",
140
+ "gospider": "web/gospider.md",
141
+ "gobuster": "web/gobuster.md",
142
+ "kiterunner": "web/kiterunner.md",
143
+ "slowhttptest": "web/slowhttptest.md",
144
+ "davtest": "web/davtest.md",
145
+ "commix": "web/commix.md",
146
+ "xsstrike": "web/xsstrike.md",
147
+ "mitmproxy2swagger": "web/mitmproxy2swagger.md",
148
+ "sqlmap": "web/sqlmap.md",
149
+ "radare2": "reverse-engineering/radare2.md",
150
+ "readelf": "reverse-engineering/readelf.md",
151
+ "ropper": "reverse-engineering/ropper.md",
152
+ "binwalk": "reverse-engineering/binwalk.md",
153
+ "frida": "reverse-engineering/frida.md",
154
+ "apktool": "reverse-engineering/apktool.md",
155
+ "checksec": "reverse-engineering/checksec.md",
156
+ "objdump": "reverse-engineering/objdump.md",
157
+ "objection": "reverse-engineering/objection.md",
158
+ "ldd": "reverse-engineering/ldd.md",
159
+ "ghidra-headless": "reverse-engineering/ghidra-headless.md",
160
+ "nm": "reverse-engineering/nm.md",
161
+ "xxd": "reverse-engineering/xxd.md",
162
+ "rabin2": "reverse-engineering/rabin2.md",
163
+ "strings": "reverse-engineering/strings.md",
164
+ "dex2jar": "reverse-engineering/dex2jar.md",
165
+ "jadx": "reverse-engineering/jadx.md",
166
+ "sipvicious": "voip-ics/sipvicious.md",
167
+ "enumiax": "voip-ics/enumiax.md",
168
+ "voiphopper": "voip-ics/voiphopper.md",
169
+ "ipmitool": "voip-ics/ipmitool.md",
170
+ "sippts": "voip-ics/sippts.md",
171
+ "modbus-cli": "voip-ics/modbus-cli.md",
172
+ "yersinia": "voip-ics/yersinia.md",
173
+ "plcscan": "voip-ics/plcscan.md",
174
+ "pixiewps": "wireless/pixiewps.md",
175
+ "bluesnarfer": "wireless/bluesnarfer.md",
176
+ "hcxtools": "wireless/hcxtools.md",
177
+ "sdptool": "wireless/sdptool.md",
178
+ "mdk4": "wireless/mdk4.md",
179
+ "crackle": "wireless/crackle.md",
180
+ "airbase-ng": "wireless/airbase-ng.md",
181
+ "reaver": "wireless/reaver.md",
182
+ "wifipumpkin3": "wireless/wifipumpkin3.md",
183
+ "airgeddon": "wireless/airgeddon.md",
184
+ "airmon-ng": "wireless/airmon-ng.md",
185
+ "wifiphisher": "wireless/wifiphisher.md",
186
+ "blueranger": "wireless/blueranger.md",
187
+ "fluxion": "wireless/fluxion.md",
188
+ "asleap": "wireless/asleap.md",
189
+ "wifite": "wireless/wifite.md",
190
+ "cowpatty": "wireless/cowpatty.md",
191
+ "airodump-ng": "wireless/airodump-ng.md",
192
+ "btscanner": "wireless/btscanner.md",
193
+ "bully": "wireless/bully.md",
194
+ "hostapd-mana": "wireless/hostapd-mana.md",
195
+ "aireplay-ng": "wireless/aireplay-ng.md",
196
+ "aircrack-ng": "wireless/aircrack-ng.md",
197
+ "eaphammer": "wireless/eaphammer.md",
198
+ "hcitool": "wireless/hcitool.md",
199
+ "kismet": "wireless/kismet.md",
200
+ "gatttool": "wireless/gatttool.md",
201
+ "arp-scan": "information-gathering/arp-scan.md",
202
+ "eyewitness": "information-gathering/eyewitness.md",
203
+ "recon-ng": "information-gathering/recon-ng.md",
204
+ "masscan": "information-gathering/masscan.md",
205
+ "h8mail": "information-gathering/h8mail.md",
206
+ "dig": "information-gathering/dig.md",
207
+ "hakrawler": "information-gathering/hakrawler.md",
208
+ "getallurls": "information-gathering/getallurls.md",
209
+ "nmap": "information-gathering/nmap.md",
210
+ "p0f": "information-gathering/p0f.md",
211
+ "metagoofil": "information-gathering/metagoofil.md",
212
+ "subfinder": "information-gathering/subfinder.md",
213
+ "certgraph": "information-gathering/certgraph.md",
214
+ "finalrecon": "information-gathering/finalrecon.md",
215
+ "naabu": "information-gathering/naabu.md",
216
+ "ldeep": "information-gathering/ldeep.md",
217
+ "fierce": "information-gathering/fierce.md",
218
+ "theHarvester": "information-gathering/theHarvester.md",
219
+ "httprobe": "information-gathering/httprobe.md",
220
+ "findomain": "information-gathering/findomain.md",
221
+ "assetfinder": "information-gathering/assetfinder.md",
222
+ "dnstwist": "information-gathering/dnstwist.md",
223
+ "dnsenum": "information-gathering/dnsenum.md",
224
+ "massdns": "information-gathering/massdns.md",
225
+ "dnsmap": "information-gathering/dnsmap.md",
226
+ "fping": "information-gathering/fping.md",
227
+ "autorecon": "information-gathering/autorecon.md",
228
+ "whois": "information-gathering/whois.md",
229
+ "sherlock": "information-gathering/sherlock.md",
230
+ "spiderfoot": "information-gathering/spiderfoot.md",
231
+ "netdiscover": "information-gathering/netdiscover.md",
232
+ "dnsgen": "information-gathering/dnsgen.md",
233
+ "dnsx": "information-gathering/dnsx.md",
234
+ "cloudbrute": "information-gathering/cloudbrute.md",
235
+ "altdns": "information-gathering/altdns.md",
236
+ "dmitry": "information-gathering/dmitry.md",
237
+ "wafw00f": "information-gathering/wafw00f.md",
238
+ "gowitness": "information-gathering/gowitness.md",
239
+ "amass": "information-gathering/amass.md",
240
+ "dnsrecon": "information-gathering/dnsrecon.md",
241
+ "whatweb": "information-gathering/whatweb.md",
242
+ "trufflehog": "information-gathering/trufflehog.md",
243
+ "shodan": "information-gathering/shodan.md",
244
+ "httpx": "information-gathering/httpx.md",
245
+ "nbtscan": "information-gathering/nbtscan.md",
246
+ "hosthunter": "information-gathering/hosthunter.md",
247
+ "cloud-enum": "information-gathering/cloud-enum.md",
248
+ "sublist3r": "information-gathering/sublist3r.md",
249
+ "chisel": "exploitation/chisel.md",
250
+ "mitm6": "exploitation/mitm6.md",
251
+ "gophish": "exploitation/gophish.md",
252
+ "setoolkit": "exploitation/setoolkit.md",
253
+ "msfconsole": "exploitation/msfconsole.md",
254
+ "metasploit": "exploitation/metasploit.md",
255
+ "ligolo-ng": "exploitation/ligolo-ng.md",
256
+ "getsploit": "exploitation/getsploit.md",
257
+ "proxytunnel": "exploitation/proxytunnel.md",
258
+ "socat": "exploitation/socat.md",
259
+ "coercer": "exploitation/coercer.md",
260
+ "msfvenom": "exploitation/msfvenom.md",
261
+ "mssqlpwner": "exploitation/mssqlpwner.md",
262
+ "iodine": "exploitation/iodine.md",
263
+ "searchsploit": "exploitation/searchsploit.md",
264
+ "routersploit": "exploitation/routersploit.md",
265
+ "smbclient": "exploitation/smbclient.md",
266
+ "evil-winrm": "exploitation/evil-winrm.md",
267
+ "netcat": "exploitation/netcat.md",
268
+ "evilginx2": "exploitation/evilginx2.md",
269
+ "veil": "exploitation/veil.md",
270
+ "odat": "exploitation/odat.md",
271
+ "dns2tcp": "exploitation/dns2tcp.md",
272
+ "impacket": "exploitation/impacket.md",
273
+ "rustscan": "information-gathering/rustscan.md",
274
+ "theharvester": "information-gathering/theharvester.md",
275
+ "holehe": "information-gathering/holehe.md",
276
+ "waybackurls": "information-gathering/waybackurls.md",
277
+ "gau": "information-gathering/gau.md",
278
+ "testssl": "information-gathering/testssl.md",
279
+ "nosqlmap": "exploitation/nosqlmap.md",
280
+ "ssrfmap": "exploitation/ssrfmap.md",
281
+ "gopherus": "exploitation/gopherus.md",
282
+ "ysoserial": "exploitation/ysoserial.md",
283
+ "droopescan": "web/droopescan.md",
284
+ "certipy": "active-directory/certipy.md",
285
+ "pwncat-cs": "post-exploitation/pwncat-cs.md",
286
+ "evilginx3": "red-team/evilginx3.md",
287
+ "suricata": "blue-team/suricata.md",
288
+ "snort": "blue-team/snort.md",
289
+ "zeek": "blue-team/zeek.md",
290
+ "osquery": "blue-team/osquery.md",
291
+ "wazuh": "blue-team/wazuh.md",
292
+ "sigma": "blue-team/sigma.md",
293
+ "hayabusa": "blue-team/hayabusa.md",
294
+ "clamav": "blue-team/clamav.md",
295
+ "velociraptor": "blue-team/velociraptor.md",
296
+ "ghidra": "reverse-engineering/ghidra.md",
297
+ "rizin": "reverse-engineering/rizin.md",
298
+ "cutter": "reverse-engineering/cutter.md",
299
+ "gdb": "reverse-engineering/gdb.md",
300
+ "pwndbg": "reverse-engineering/pwndbg.md",
301
+ "ltrace": "reverse-engineering/ltrace.md",
302
+ "strace": "reverse-engineering/strace.md",
303
+ "angr": "reverse-engineering/angr.md",
304
+ "volatility3": "forensics/volatility3.md",
305
+ "autopsy": "forensics/autopsy.md",
306
+ "bulk_extractor": "forensics/bulk_extractor.md",
307
+ "zsteg": "forensics/zsteg.md",
308
+ "oletools": "forensics/oletools.md",
309
+ "mobsf": "mobile/mobsf.md",
310
+ "apkleaks": "mobile/apkleaks.md",
311
+ "androguard": "mobile/androguard.md",
312
+ "hcxdumptool": "wireless/hcxdumptool.md",
313
+ "cloudfox": "cloud-native/cloudfox.md",
314
+ "ciphey": "crypto/ciphey.md",
315
+ "rsactftool": "crypto/rsactftool.md",
316
+ "curl": "utility/curl.md",
317
+ "jq": "utility/jq.md",
318
+ "anew": "utility/anew.md",
319
+ "notify": "utility/notify.md"
320
+ },
321
+ "playbooks": {
322
+ "internal-network": "playbooks/internal-network.md",
323
+ "wireless-assessment": "playbooks/wireless-assessment.md",
324
+ "voip-ics": "playbooks/voip-ics.md",
325
+ "rfid-nfc": "playbooks/rfid-nfc.md",
326
+ "password-audit": "playbooks/password-audit.md",
327
+ "reporting-workflow": "playbooks/reporting-workflow.md",
328
+ "active-directory": "playbooks/active-directory.md",
329
+ "internal-network-protocols": "playbooks/internal-network-protocols.md",
330
+ "README": "playbooks/README.md",
331
+ "post-exploitation": "playbooks/post-exploitation.md",
332
+ "mobile-application": "playbooks/mobile-application.md",
333
+ "source-code-audit": "playbooks/source-code-audit.md",
334
+ "api-security": "playbooks/api-security.md",
335
+ "web-application": "playbooks/web-application.md",
336
+ "cloud-native-assessment": "playbooks/cloud-native-assessment.md",
337
+ "forensics-triage": "playbooks/forensics-triage.md",
338
+ "external-attack-surface": "playbooks/external-attack-surface.md"
339
+ }
340
+ }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "blitzstrike",
3
- "version": "1.7.0",
3
+ "version": "1.9.0",
4
4
  "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
5
5
  "type": "module",
6
6
  "bin": {
@@ -20,6 +20,7 @@
20
20
  "docs",
21
21
  "intelligence",
22
22
  "manuals",
23
+ "manuals-index.json",
23
24
  "opencode-agents",
24
25
  "skills",
25
26
  "tools-catalog.json"