The Analyzer v2.0 — 30 attack vectors, 9 new exploiters

New vectors added:
- 22: SSRF Proof — cloud metadata exfiltration (CRITICAL)
- 23: Prototype Pollution — Node.js client/server (HIGH)
- 24: WebSocket Hijack — WS origin bypass + injection (HIGH)
- 25: Mass Assignment — protected field modification (HIGH)
- 26: HTTP Parameter Pollution — WAF bypass (HIGH)
- 27: Insecure Deserialization — PHP/Java/Node (CRITICAL)
- 28: OAuth Takeover — redirect_uri / state / CSRF (CRITICAL)
- 29: Web Cache Poisoning — unkeyed header injection (HIGH)
- 30: CRLF Injection — HTTP response splitting (CRITICAL)

All vectors PROVE exploitation by dumping data/credentials,
not just detecting config issues.

analyzer

@@ -44,7 +44,7 @@ show_banner() {
   echo '       ██║   ██║  ██║███████╗    ██║  ██║██║ ╚████║██║  ██║██║  ██║███████╗   '
   echo '       ╚═╝   ╚═╝  ╚═╝╚══════╝    ╚═╝  ╚═╝╚═╝  ╚═══╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝   '
   echo ''
-  echo -e "  ${BRIGHT_YELLOW}Autonomous Bug Bounty Analyzer v1.0${NC}"
+  echo -e "  ${BRIGHT_YELLOW}Autonomous Bug Bounty Analyzer v2.0${NC}"
   echo -e "  ${DIM}Authorized Testing Only${NC}"
   echo ''
 }
@@ -59,7 +59,7 @@ interactive_mode() {
   echo -e "  ${GREEN}1${NC}. Quick Scan  — Fast recon + auto-vector selection"
   echo -e "  ${GREEN}2${NC}. Deep Scan   — Full recon, all vectors, exhaustive"
   echo -e "  ${GREEN}3${NC}. Custom Scan — Pick your own vectors"
-  echo -e "  ${GREEN}4${NC}. List Vectors — Show all 21 attack vectors"
+  echo -e "  ${GREEN}4${NC}. List Vectors — Show all 30 attack vectors"
   echo -e "  ${GREEN}5${NC}. View Reports — Browse past results"
   echo -e "  ${DIM}q${NC}. Quit"
   echo ''
@@ -169,8 +169,8 @@ deep_scan() {
   recon_target "$target" "$report"
   
   # Step 3: Run ALL vectors
-  print_step 3 3 "Running all 21 attack vectors"
-  local all_vectors=$(seq 1 21 | tr '\n' ' ')
+  print_step 3 3 "Running all 30 attack vectors"
+  local all_vectors=$(seq 1 30 | tr '\n' ' ')
   run_vectors "$target" "$report" $all_vectors
   
   # Generate report
@@ -283,6 +283,15 @@ run_vectors() {
       19) func_name="vector_race" ;;
       20) func_name="vector_nosqli" ;;
       21) func_name="vector_nuclei" ;;
+      22) func_name="vector_ssrf_proof" ;;
+      23) func_name="vector_prototype_pollution" ;;
+      24) func_name="vector_websocket_hijack" ;;
+      25) func_name="vector_mass_assignment" ;;
+      26) func_name="vector_hpp" ;;
+      27) func_name="vector_deserialization" ;;
+      28) func_name="vector_oauth_takeover" ;;
+      29) func_name="vector_cache_poisoning" ;;
+      30) func_name="vector_crlf_injection" ;;
     esac
     
     if declare -f "$func_name" >/dev/null; then
@@ -353,6 +362,7 @@ cli_mode() {
       shift
       custom_scan "$1"
       ;;
+    hunt|h)    source "$ENGINE_DIR/hunter.sh" && hunter_main "${3:-500}" "${4:-auto}" ;;
     list|l)    list_vectors ;;
     *)         quick_scan "$1" ;;
   esac