Waymap - Web Vulnerability Scanner.

Current Version: 6.2.11 Author: Trix Cyrus(Vicky) Copyright: © 2024-25 Trixsec Org
Maintained: Yes

What is Waymap?

Waymap is a fast and optimized web vulnerability scanner designed to identify security flaws in web applications. With support for multiple scan types and customizable configurations, it is a versatile tool for ethical hackers, penetration testers, and security enthusiasts. And Is Able To Scan For 75+ Web Vulnerabilities

Features Overview

---

Latest Update

v5.9.4

• Removed Old Error Based Sql Method Use the new one by --scan sqli
• Updated The Open Redirect Vuln Testing In Waymap
• Updated The Crawler To v4
• Added 249 High Risk Cves Data In Waymap
• Total Count: 390

v6.1.6

• Added New Module In Deepscan Profile : Vulnerable Javascript Library And Files Scanner
• Added WAF/IPS Detector In Waymap Can Detect More Than 160 Types of Waf
• Usage: --check-waf/--waf https://example.com

v6.1.7

• XSS payload file missing error fix
• some minor bugs fix

v6.1.8

• updated the SQL Injection Exiting logic
• minor bug fixes

v6.2.8

• Added Time Based Sqli Scanning Logic
• Added Scan Results Saving Logic
• Added Interactive Prompt Based And Arggument Based Scanning Logic
• Updated The UI

v6.2.9

• Bug Fixed
• Optimised
• Reduced Lag

v6.2.10

• Multi-threading in SQLi

v6.2.11

• Install Waymap using pip install waymap

--- New Big Updates Soon

🚀 Features

1. Flexible Scanning Options

• Target-based scanning: Scan single or multiple targets using --target or --multi-target options
• Profile-based scanning: Supports high-risk, critical-risk and deepscan scan profiles for targeted assessments.

2. Supported Scan Types

• SQL Injection (SQLi):
  Detect vulnerabilities related to SQL injection.
• Command Injection (CMDi):
  Identify potential command execution vulnerabilities.
• Server-Side Template Injection (SSTI):
  Scan for template injection risks in server-side frameworks.
• Cross-Site Scripting (XSS):
  Check for reflective XSS vulnerabilities.
• Local File Inclusion (LFI):
  Locate file inclusion vulnerabilities.
• Open Redirect:
  Identify redirect-related issues.
• Carriage Return and Line Feed (CRLF):
  Scan for CRLF injection flaws.
• Cross-Origin Resource Sharing (CORS):
  Check for misconfigurations in CORS policies.
• All-in-one scanning:
  Perform all available scans in a single command.

3. Profile-based Scanning

• High-Risk Profile:
• Critical-Risk Profile:
• deepscan Profile: Focuses on severe vulnerabilities, such as CVE-based attacks.

4. Crawling Capabilities

• Crawl target websites with customizable depth (--crawl).
• Automatically discover and extract URLs for scanning.

5. Threaded Scanning

• Speed up scans with multithreading (--threads).

6. Automation Features

• Skip prompts using the --no-prompt option.
• Automatically handle missing directories, files, and session data.

7. Update Checker

• Easily check for the latest updates (--check-updates).

---

🛠️ How to Use

Basic Commands

1. Scan a single target:

   python waymap.py --crawl 3 --target https://example.com --scan {scan_type}

2. Scan multiple targets from a file:

   python waymap.py --crawl 3 --multi-target targets.txt --scan {scan_type}

3. Directly scan a single Target Without Crawling:

   python waymap.py --target https://example.com/page?id=1 --scan {scan_type}
   

4. Directly Scan multiple targets from a file:

   python waymap.py  --multi-target targets.txt --scan {scan_type}(example url type: https://example.com/page?id=1 )
   

5. Profile-based scanning:

   python waymap.py --target https://example.com --profile high-risk/critical-risk/deepscan

Thread Configuration

1. Use threading for faster scans:

   python waymap.py --crawl 3 --target https://example.com --scan ssti --threads 10

Update Check

1. Ensure you have the latest version:

   python waymap.py --check-updates

Check Help

python waymap.py -h

---

Repository Views (After 05-01-2025)

Waymap makes web vulnerability scanning efficient and accessible. Start securing your applications today! 🎯

Credits

• Thanks SQLMAP For Payloads Xml File

If you face any issues in Waymap, please submit them here: https://github.com/TrixSec/waymap/issues

Also Star The Repo And Fork It

Follow Us on Telegram

Stay updated with the latest tools and hacking resources. Join our Telegram Channel by clicking the logo below:

Happy Hacking!