Blitz Strike

Reconnaissance at speed. Analysis in depth. Validation before report.

Blitz Strike is a structured penetration-testing methodology — reconnaissance, source analysis, and validation — delivered as a universal MCP server. It enumerates the attack surface (BLITZ), traces source-to-sink reachability (EAGLE-EYE), and verifies each finding live before it is reported (STRIKE). One server, every agent: scope enforcement to submission-ready findings in a single run_engagement call, with the relevant exploit-tool manual attached to every result.

A scan hit is a hypothesis. A live test is the verdict.

Blitz Strike exists to eliminate the two most common failure modes in automated security assessment: false positives from surface-level pattern matching, and unverified findings reported without live confirmation.

What it does

Blitz Strike is a Model Context Protocol (MCP) server (TypeScript / Bun) that packages a 3-tier security-audit methodology as callable tools — and runs the whole engagement server-side, so a single run_engagement call works from Claude Code, Cursor, Hermes, OpenCode, Claude Desktop, Gemini, or any MCP client.

The three tiers

Blitz Strike maps a structured penetration-testing methodology — reconnaissance, source analysis, and validation — into three tool tiers executed server-side.

Reconnaissance → analysis → validation. Nothing is reported until STRIKE confirms it.

Related MCP server: PengStrike AI MCP

Why TypeScript / Bun

• Single static binary via bun build --compile — ship one executable per platform.

• Zero-install distribution via bunx blitzstrike / npx blitzstrike.

• MCP TypeScript SDK first-class (@modelcontextprotocol/sdk).

• One toolchain for dev + test + build + compile.

Quickstart (30 seconds)

# Zero-install — works from any MCP client, no clone, no build
npx -y blitzstrike doctor        # verify the environment
npx -y blitzstrike install       # auto-register with every detected agent CLI

npx blitzstrike install detects every installed agent CLI (Claude Code, Cursor, OpenCode, Codex, Hermes, Gemini, Windsurf, Copilot, Cline) and writes the correct MCP config to each one in its native format. Restart your agent and call run_engagement.

From source:

git clone https://github.com/shinthink/blitzstrike.git
cd blitzstrike
bun install
bun run src/index.ts serve --mcp

Client Configuration (works in any MCP client)

{
  "mcpServers": {
    "blitzstrike": {
      "command": "blitzstrike",
      "args": ["serve", "--mcp"]
    }
  }
}

• Claude Code / Desktop: claude_desktop_config.json or .mcp.json

• Cursor: .cursor/mcp.json

• OpenCode: .mcp.json

• Hermes: mcp_servers: in config.yaml

• Gemini / Copilot: native MCP config

Run blitzstrike install to print the exact snippet.

CLI

blitzstrike serve --mcp       # start MCP server over stdio (default)
blitzstrike doctor            # health check: runtime + 130-tool catalog + creds
blitzstrike install           # write MCP config to detected clients (Claude/Cursor/OpenCode)
blitzstrike install --dry-run # preview the config without writing
blitzstrike version           # print version

What doctor checks

Each issue carries a fix: line — no guessing.

What install does

blitzstrike install detects which MCP client config files already exist (Claude ~/.claude.json, Cursor ~/.cursor/mcp.json, project .mcp.json) and merges the Blitz Strike server entry in — it never overwrites your existing MCP servers. With no client detected, it prints the snippet for manual paste.

Tools

BLITZ — attack-surface triage

EAGLE-EYE — deep trace

STRIKE — verify + recon + orchestrate

CATALOG — breadth layer (tools + skills knowledge base)

MANUALS — deep tool reference + playbooks (wired into flow)

INTELLIGENCE — data layer (WAF + correlations + fuzzer)

The intelligence layer (WAF signatures, tech/CVE/port correlations, fuzzer data, vuln ontology, exploit payloads, nuclei detection templates) is sourced from airecon (MIT), PayloadsAllTheThings (MIT), and nuclei-templates (MIT) — loaded at runtime and wired into the tool surface above.

270 tool manuals + 17 playbooks from kali-pentest (Apache-2.0). These are NOT decoration — they are wired into the flow:

• tool_lookup(name) auto-attaches the tool's full manual.

• run_engagement() attaches the relevant manual per matched chain's tools field.

MEMORY — long-term knowledge (self-growing)

Memory is append-only JSONL at ~/.blitzstrike/memory.jsonl (override with BLITZSTRIKE_HOME). run_engagement auto-captures matched escalation chains as pattern entries (deduped by chain id), so the knowledge base grows with every engagement — no duplicate spam, and only verified=true entries are authoritative.

Tools Catalog (tools-catalog.json)

130 self-written security tools (not copied from any project), each with command base, key flags, install command per platform, check_installed probe, phase, tags, alternatives, requires_root, pipes, and homepage.

Skills Knowledge Base (skills/)

32 skill playbooks (markdown) — universal, license-safe hidden gems from the internet (MIT). Our personal attack-tree playbooks were removed (they were private methodology, not universal exploit scripts).

• adversary-playbook (14, MIT) — ap-* prefix. Rare offensive playbooks: cross-forest-trust-abuse, gitea-ci-injection, kerberos-trust-abuse, multi-domain-ad-attacks, client-side-crypto-forgery.

• hack.proof (18, MIT) — hp-* prefix. End-to-end audit playbooks: full-security-audit, smart-contract-audit, api-security-test, sast-code-review, container-image-scan, iac-cloud-posture.

See ATTRIBUTION.md for full license/copyright notices.

Escalation Chains (chains.json)

57 data-driven escalation chains, each with ordered steps carrying:

• tool_hint — which Blitz Strike tool to use

• success_criteria — binary observable for the step

• invariant_check — the assumption that MUST hold for exploitation

• negative_control — how to refute the finding

Examples: ssrf_cloud_metadata, lfi_log_poison_rce, appkey_leak_deserialization_rce, hmac_empty_key_forgery, intval_form_id_bypass, extract_variable_injection_lfi, split_controller_upload_bypass, race_condition_double_spend, ssti_template_injection_rce, jwt_alg_confusion_forgery, cache_poisoning_xss, subdomain_takeover, and more.

Edit chains.json to add knowledge — never hardcode in source.

Environment Variables

All other tools need no credentials.

Build

bun install          # deps
bun run typecheck    # tsc --noEmit
bun run build        # ESM bundle → dist/index.js
bun run compile      # single static binary → dist/blitzstrike

Methodology Notes

• Sink ≠ vuln. A dangerous function in the same file as an unauth handler does not mean the handler calls it. Use eagle_eye to confirm scope.

• File write ≠ RCE (CF-003). A writable file must be loaded by the runtime to be execution.

• Default server config only. Default Apache FilesMatch .+\.ph(ar|p|tml)$ has a $ anchor — .php.jpg does not execute.

• Every finding is a HYPOTHESIS until strike_verify reflects your marker AND the chain's negative_control stays inert.

Disclaimer

This tool is provided for educational and authorized security research only. Do not use against systems without explicit permission from the owner.

Further Reading

• Installation — prerequisites, install, client registration.

• Usage — one-call engagement, granular path, modes, memory.

• Manifesto — the invariants that drive the methodology.

• Contributing — how to add chains, tools, and data.

• Changelog — version history.

• Roadmap — where this is headed.

• Security — responsible disclosure + authorized use.

• Third-Party Notices — vendored data licenses.