Current Version: 5.7.2 Author: Trix Cyrus
Copyright: © 2024 Trixsec Org
Maintained: Yes

Waymap is a fast and optimized web vulnerability scanner designed to identify security flaws in web applications. With support for multiple scan types and customizable configurations, it is a versatile tool for ethical hackers, penetration testers, and security enthusiasts. And Is Able To Scan For 75+ Web Vulnerabilities

• Added 45 CVEs Vulnerability Detections Logics
• 11 Critical-Risk CVEs And 34 High-Risk CVEs
• For CVEs Info Read The CVEVULN.md File

• Added New 19 CVEs Vulnerability Detections Logics
• 8 Critical-Risk CVEs And 11 High-Risk CVEs
• For CVEs Info Read The CVEVULN.md File

• Removed arg --random-agent, now waymap will by default use different headers for every requests
• Added IP Spoofing for more anonymity
• Updated Wp Plugin Checking Logic In Both High Profile And Critical Profile
• some minor bug fix

• Added New Logic To Update Waymap

• Target-based scanning: Scan single or multiple targets using --target or --multi-target options (Requires Crawling).
• Direct URL scanning: Use --url or --multi-url to scan specific URLs without crawling.
• Profile-based scanning: Supports high-risk and critical-risk scan profiles for targeted assessments.

• SQL Injection (SQLi):
  Detect vulnerabilities related to SQL injection.
• Command Injection (CMDi):
  Identify potential command execution vulnerabilities.
• Server-Side Template Injection (SSTI):
  Scan for template injection risks in server-side frameworks.
• Cross-Site Scripting (XSS):
  Check for reflective XSS vulnerabilities.
• Local File Inclusion (LFI):
  Locate file inclusion vulnerabilities.
• Open Redirect:
  Identify redirect-related issues.
• Carriage Return and Line Feed (CRLF):
  Scan for CRLF injection flaws.
• Cross-Origin Resource Sharing (CORS):
  Check for misconfigurations in CORS policies.
• All-in-one scanning:
  Perform all available scans in a single command.

• High-Risk Profile:
• Critical-Risk Profile:
  Focuses on severe vulnerabilities, such as CVE-based attacks.

• Crawl target websites with customizable depth (--crawl).
• Automatically discover and extract URLs for scanning.

• Speed up scans with multithreading (--threads).

• Randomize requests using different user agents (--random-agent).

• Skip prompts using the --no-prompt option.
• Automatically handle missing directories, files, and session data.

• Easily check for the latest updates (--check-updates).

1. Scan a single target:

   python waymap.py --crawl 3 --target https://example.com --scan {scan_type}

2. Scan multiple targets from a file:

   python waymap.py --crawl 3 --multi-target targets.txt --scan {scan_type}

3. Directly scan a single URL:

   python waymap.py --url https://example.com/page?id=1 --scan {scan_type}

4. Profile-based scanning:

   python waymap.py --profileurl https://example.com --profile high-risk/critical-risk

1. Use threading for faster scans:

   python waymap.py --crawl 3 --target https://example.com --scan ssti --threads 10

1. Ensure you have the latest version:

   python waymap.py --check-updates

python waymap.py -h

• Thanks SQLMAP For Payloads Xml File

Stay updated with the latest tools and hacking resources. Join our Telegram Channel by clicking the logo below: