blitzstrike 2.4.80 → 2.4.82

package/intelligence/patterns.json

@@ -35,7 +35,10 @@
         "admin/role tables",
         "PII and financial records",
         "password-hash dumps for offline cracking"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 15000,
+      "typical_payout": "$1K–$15K"
     },
     {
       "id": "ssrf",
@@ -67,7 +70,10 @@
         "internal admin panels + APIs",
         "internal Redis/DB/Elasticsearch",
         "cloud IAM / STS AssumeRole endpoints"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 15000,
+      "typical_payout": "$1K–$15K"
     },
     {
       "id": "ssti",
@@ -96,7 +102,10 @@
         "direct RCE",
         "config files + secrets",
         "template/partials with injected backdoors"
-      ]
+      ],
+      "payout_min": 2000,
+      "payout_max": 10000,
+      "typical_payout": "$2K–$10K"
     },
     {
       "id": "xxe",
@@ -124,7 +133,10 @@
         "local files (/etc/passwd, app keys, .env)",
         "internal SSRF via entity",
         "cloud metadata via file:// + SSRF chain"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "deserialization",
@@ -154,7 +166,10 @@
         "RCE via gadget chain",
         "session/cookie forgery",
         "admin object injection"
-      ]
+      ],
+      "payout_min": 5000,
+      "payout_max": 30000,
+      "typical_payout": "$5K–$30K"
     },
     {
       "id": "type_juggling",
@@ -182,7 +197,10 @@
         "authentication bypass",
         "session/cookie validation bypass",
         "API token check bypass"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 5000,
+      "typical_payout": "$500–$5K"
     },
     {
       "id": "mass_assignment",
@@ -211,7 +229,10 @@
         "role / is_admin / is_verified flags",
         "subscription tier + pricing fields",
         "account ownership / org membership"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 5000,
+      "typical_payout": "$500–$5K"
     },
     {
       "id": "prototype_pollution",
@@ -238,7 +259,10 @@
         "RCE gadgets (child_process, template engines)",
         "authentication/ACL bypass",
         "XSS or property-injection escalation"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "crlf_injection",
@@ -265,7 +289,10 @@
         "Set-Cookie injection → session fixation",
         "response splitting → XSS",
         "cache poisoning → stored XSS"
-      ]
+      ],
+      "payout_min": 300,
+      "payout_max": 3000,
+      "typical_payout": "$300–$3K"
     },
     {
       "id": "path_confusion",
@@ -297,7 +324,10 @@
         "/etc/passwd and shadow",
         "source code for further audit",
         "writable dirs for a shell drop"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "wrong_sanitizer",
@@ -322,7 +352,10 @@
       "crown_jewels": [
         "downstream injection (SQLi/XSS/RCE)",
         "stored data that re-enters a different sink"
-      ]
+      ],
+      "payout_min": 300,
+      "payout_max": 3000,
+      "typical_payout": "$300–$3K"
     },
     {
       "id": "missing_authz",
@@ -352,7 +385,10 @@
         "admin/moderator endpoints",
         "financial documents + billing APIs",
         "org/account management actions"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "missing_nonce",
@@ -379,7 +415,10 @@
         "password/email change",
         "money transfer / payment actions",
         "admin config changes"
-      ]
+      ],
+      "payout_min": 300,
+      "payout_max": 3000,
+      "typical_payout": "$300–$3K"
     },
     {
       "id": "file_upload",
@@ -410,7 +449,10 @@
         "web-reachable upload directory",
         "avatar/profile/document uploads",
         "document converters (PDF/Office) with a known chain"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 10000,
+      "typical_payout": "$500–$10K"
     },
     {
       "id": "priv_esc",
@@ -439,7 +481,10 @@
         "administrator / superuser role",
         "tenant-admin role",
         "org-owner / root capabilities"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "hardcoded_secret",
@@ -471,7 +516,10 @@
         "database credentials",
         "JWT signing keys",
         "payment/provider API tokens"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 10000,
+      "typical_payout": "$500–$10K"
     },
     {
       "id": "llm_injection",
@@ -503,7 +551,10 @@
         "RUN-TWICE RULE — the extraction/injection must reproduce token-for-token across two fresh sessions (filter out model confabulation)",
         "NON-GUESSABLE ANCHOR — it must leak an actual verifiable internal key, endpoint URL, or cross-tenant data, not a plausible guess",
         "OOB PROOF — tool-use or markdown exfiltration must produce a verifiable callback log on your listener"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 10000,
+      "typical_payout": "$500–$10K"
     },
     {
       "id": "graphql_exposure",
@@ -530,7 +581,10 @@
         "the full schema (every query/mutation/field)",
         "hidden/admin-only fields",
         "mutation endpoints for destructive actions"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 5000,
+      "typical_payout": "$500–$5K"
     },
     {
       "id": "oauth_misconfig",
@@ -559,7 +613,10 @@
         "the authorization code",
         "access/refresh tokens",
         "account-linking flows"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 5000,
+      "typical_payout": "$500–$5K"
     },
     {
       "id": "grpc_reflection",
@@ -582,7 +639,10 @@
         "the full API contract (every service/method)",
         "hidden/internal methods",
         "input schemas for fuzzing"
-      ]
+      ],
+      "payout_min": 200,
+      "payout_max": 2000,
+      "typical_payout": "$200–$2K"
     },
     {
       "id": "dependency_confusion",
@@ -608,7 +668,10 @@
         "the CI/CD build pipeline",
         "artifact/deploy credentials baked into the build",
         "the internal package name registry (what to squat)"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 20000,
+      "typical_payout": "$1K–$20K"
     },
     {
       "id": "ml_supply_chain",
@@ -633,7 +696,10 @@
         "the model-serving host (RCE on load)",
         "training data / weights",
         "the inference API surface"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 20000,
+      "typical_payout": "$1K–$20K"
     },
     {
       "id": "rust_unsafe",
@@ -665,7 +731,10 @@
         "any host RCE / memory corruption",
         "the unsafe block's invariants (what must hold for soundness)",
         "FFI boundaries (the highest-yield audit surface)"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 10000,
+      "typical_payout": "$500–$10K"
     },
     {
       "id": "rust_format_string",
@@ -690,7 +759,10 @@
         "the formatting arguments on the stack",
         "any panic path that formats attacker input",
         "logging/telemetry that echoes request data"
-      ]
+      ],
+      "payout_min": 500,
+      "payout_max": 5000,
+      "typical_payout": "$500–$5K"
     },
     {
       "id": "jwt_alg_confusion",
@@ -724,7 +796,10 @@
         "the RSA public key (published at /.well-known/jwks.json)",
         "admin role claims overridden by token claims",
         "treasury/admin endpoints gated only by a role claim"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     },
     {
       "id": "cache_deception",
@@ -758,7 +833,10 @@
         "per-session private profile/account JSON",
         "api_key / session tokens in the cached body",
         "any victim-session data cached under a static-extension URL"
-      ]
+      ],
+      "payout_min": 1000,
+      "payout_max": 10000,
+      "typical_payout": "$1K–$10K"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blitzstrike",
-  "version": "2.4.80",
+  "version": "2.4.82",
   "description": "Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.",
   "type": "module",
   "bin": {