blitzstrike 2.4.71 → 2.4.73
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +34 -0
- package/dist/index.js +420 -177
- package/intelligence/hackbot-arena.json +339 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,40 @@ All notable changes to Blitz Strike are documented here.
|
|
|
5
5
|
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/).
|
|
7
7
|
|
|
8
|
+
## [2.4.73] — 2026-09-17
|
|
9
|
+
|
|
10
|
+
### Changed — crack_hash wordlist support (benchmark-driven fix)
|
|
11
|
+
|
|
12
|
+
- `crack_hash` gained a `wordlist` arg (comma-separated paths) + `maxCandidates`
|
|
13
|
+
arg, and `crackHash()` now STREAMS any supplied wordlist and AUTOLOADS the
|
|
14
|
+
standard seclists/rockyou locations (`/usr/share/wordlists/rockyou.txt`,
|
|
15
|
+
`/opt/seclists/.../rockyou-*.txt`, Common-Credentials) when present. Cracking
|
|
16
|
+
is line-streamed (no full-file load), so a 14M-line rockyou won't OOM.
|
|
17
|
+
- Added a pure-JS MD4 (NTLM) implementation so NTLM hashes also crack offline.
|
|
18
|
+
- Result now reports `source` (common/wordlist) + `candidates_checked`.
|
|
19
|
+
- Root cause: the Hackbot Arena labs04 run found the built-in common list was too
|
|
20
|
+
small (missed `md5("xNnWo6272k7x")`, only present in the full rockyou) — the
|
|
21
|
+
tool now reaches whatever wordlist is available on the box.
|
|
22
|
+
|
|
23
|
+
## [2.4.72] — 2026-09-14
|
|
24
|
+
|
|
25
|
+
### Added — Hackbot Arena benchmark integration
|
|
26
|
+
|
|
27
|
+
- New `intelligence/hackbot-arena.json` (schema blitzstrike-hackbot-arena-v1): the
|
|
28
|
+
30 NusaSec Hackbot Arena web-security labs (id/name/difficulty/port/stack/
|
|
29
|
+
vuln_class/flag_location/judge success-when) — a local benchmark of realistic
|
|
30
|
+
Dockerized vulnerability chains with deterministic flags.
|
|
31
|
+
- New `src/hackbot-arena.ts` + three MCP tools:
|
|
32
|
+
- `hackbot_arena_list` — the 30 labs (evaluator view, no flags/solutions).
|
|
33
|
+
- `hackbot_arena_brief(labId)` — the AGENT brief: target URL, vuln class, stack,
|
|
34
|
+
flag FORMAT, and a DERIVED attack plan (vectors/detectors/chains/tools) mapped
|
|
35
|
+
from the vuln class. Never leaks the flag, judge criteria, or solution.
|
|
36
|
+
- `hackbot_arena_coverage` — maps all 30 labs against Blitz Strike's
|
|
37
|
+
detector/vector coverage (currently ~27/30 labs have deterministic tooling).
|
|
38
|
+
- Verified live against labs03 (JWTea): the brief maps it to the jwt vector +
|
|
39
|
+
jwt_analyze tool, and live_recon fingerprints the running lab (nginx + the
|
|
40
|
+
JWKS/docs endpoints) — the agent then drives the JWT alg-confusion chain.
|
|
41
|
+
|
|
8
42
|
## [2.4.71] — 2026-09-14
|
|
9
43
|
|
|
10
44
|
### Added — Rust language support (adapter + detectors)
|