attack and vulnerability hitboxes