The Analyzer v2.0 — 30 attack vectors, 9 new exploiters

New vectors added:
- 22: SSRF Proof — cloud metadata exfiltration (CRITICAL)
- 23: Prototype Pollution — Node.js client/server (HIGH)
- 24: WebSocket Hijack — WS origin bypass + injection (HIGH)
- 25: Mass Assignment — protected field modification (HIGH)
- 26: HTTP Parameter Pollution — WAF bypass (HIGH)
- 27: Insecure Deserialization — PHP/Java/Node (CRITICAL)
- 28: OAuth Takeover — redirect_uri / state / CSRF (CRITICAL)
- 29: Web Cache Poisoning — unkeyed header injection (HIGH)
- 30: CRLF Injection — HTTP response splitting (CRITICAL)

All vectors PROVE exploitation by dumping data/credentials,
not just detecting config issues.

targets/hunt_targets.txt

@@ -0,0 +1,200 @@
+google.com
+gtld-servers.net
+cloudflare.com
+gstatic.com
+facebook.com
+microsoft.com
+googleapis.com
+youtube.com
+amazonaws.com
+apple.com
+instagram.com
+mail.ru
+ezviz7.com
+fbcdn.net
+akamai.net
+dzen.ru
+twitter.com
+linkedin.com
+googletagmanager.com
+googlevideo.com
+live.com
+office.com
+akamaiedge.net
+akadns.net
+amazon.com
+hicloudcam.com
+azure.com
+wikipedia.org
+domaincontrol.com
+github.com
+bing.com
+whatsapp.net
+doubleclick.net
+fastly.net
+googleusercontent.com
+apple-dns.net
+appsflyersdk.com
+trafficmanager.net
+microsoftonline.com
+aaplimg.com
+netflix.com
+office.net
+wordpress.org
+digicert.com
+skype.com
+sharepoint.com
+youtu.be
+ripn.net
+gandi.net
+pinterest.com
+cloudfront.net
+goo.gl
+x.com
+whatsapp.com
+cloud.microsoft
+googlesyndication.com
+yahoo.com
+icloud.com
+windowsupdate.com
+tiktok.com
+msn.com
+cloudflare.net
+spotify.com
+googledomains.com
+adobe.com
+roblox.com
+windows.net
+gvt1.com
+ntp.org
+wa.me
+chatgpt.com
+vimeo.com
+akam.net
+myfritz.net
+tiktokcdn.com
+gvt2.com
+zoom.us
+edgekey.net
+qq.com
+workers.dev
+pv-cdn.net
+baidu.com
+cdninstagram.com
+windows.com
+yandex.net
+tiktokv.com
+cloudflare-dns.com
+nginx.org
+ytimg.com
+mozilla.org
+nic.ru
+opera.com
+yandex.ru
+samsung.com
+edgesuite.net
+nginx.com
+sentry.io
+wordpress.com
+reddit.com
+gwfb.net
+root-servers.net
+okcdn.ru
+ui.com
+discord.gg
+bit.ly
+google-analytics.com
+office365.com
+t.me
+blogspot.com
+a2z.com
+criteo.com
+europa.eu
+trbcdn.net
+b-cdn.net
+vk.com
+vedcdnlb.com
+github.io
+googleadservices.com
+snapchat.com
+app-measurement.com
+unity3d.com
+amazon-adsystem.com
+apache.org
+epicgames.com
+nih.gov
+registrar-servers.com
+amazonvideo.com
+outlook.com
+cdn77.org
+dns.google
+app-analytics-services.com
+mailinabox.email
+amazon.dev
+prodregistryv2.org
+kaspersky.com
+msftncsi.com
+vkuserphoto.ru
+gravatar.com
+intuit.com
+forms.gle
+dropbox.com
+godaddy.com
+f5.com
+iiko.it
+xiaomi.com
+dnsowl.com
+yccdn.ru
+miit.gov.cn
+reg.ru
+archive.org
+spo-msedge.net
+steamserver.net
+nytimes.com
+tumblr.com
+azurefd.net
+paypal.com
+ax-msedge.net
+msftconnecttest.com
+one.one
+discord.com
+shopify.com
+aliyuncs.com
+applovin.com
+dns-parking.com
+adobe.io
+nflxso.net
+3gppnetwork.org
+ggpht.com
+static.microsoft
+macromedia.com
+azurewebsites.net
+flickr.com
+adtrafficquality.google
+userapi.com
+aws.dev
+jomodns.com
+soundcloud.com
+ipv4only.arpa
+medium.com
+hichina.com
+bytefcdn-oversea.com
+wac-msedge.net
+w3.org
+tm-azurefd.net
+webex.com
+cdn-apple.com
+taboola.com
+example.com
+theguardian.com
+cnn.com
+edgcdn.net
+rubiconproject.com
+vungle.com
+sfx.ms
+shifen.com
+oracle.com
+msedge.net
+forbes.com
+creativecommons.org
+nic.direct

targets/live_200.txt

@@ -0,0 +1,6 @@
+https://apple.com
+https://amazon.com
+https://bing.com
+https://adobe.io
+https://wikipedia.org
+https://twitter.com

targets/live_targets.txt

@@ -0,0 +1,3 @@
+Usage: httpx [OPTIONS] URL
+
+Error: No such option: -l