Follow me on GitHub: https://github.com/TrixSec

And also Fork and star the waymap repo : https://github.com/TrixSec/waymap

New Crazy Tool Soon 🤙🏼👅

🔥 New Tool Release: HexaCloner 🔥

Clone any website with advanced options, blazing speed, and a beautiful CLI!

Selective resource cloning
Resume support
Authentication
Progress bar & colored output
Cross-platform
Get it now:
🔗 https://github.com/TrixSec/HexaCloner

By Trix Cyrus (@TrixSec)
#opensource #python #webtools

What next dork searcher separately or integrated in waymap?

🚀 WAYMAP v7.0.0 - MAJOR RELEASE! 🚀

🎉 The biggest update yet is here!

We're thrilled to announce Waymap v7.0.0 - a complete UI/UX overhaul that makes vulnerability scanning more professional and consistent than ever before!

━━━━━━━━━━━━━━━━━━━━━━━━━━

✨ WHAT'S NEW

🎨 Complete UI Standardization
• All 15 scan modules now have consistent formatting
• Professional cyan headers across all scans
• Standardized icons and color scheme:
[•] Cyan - Information
[✓] Green - Vulnerabilities
[⚠️] Yellow - Warnings
[✗] Red - Errors
[⚙️] Blue - Debug output

🐛 Critical Bug Fixes
• Fixed JSON structure crashes
• Resolved circular import issues
• Fixed result saving across all modules
• Enhanced threading consistency
• Graceful exit handling everywhere

🔧 Enhanced Features
• Verbose mode for detailed debugging
• Consistent user prompts
• Proper completion messages
• Better error handling
• Improved threading performance

━━━━━━━━━━━━━━━━━━━━━━━━━━

📦 15 MODULES STANDARDIZED

✅ Injection Scans (7)
LFI • CMDi • SSTI • CRLF • CORS • Open Redirect • XSS

✅ SQL Injection (3)
Boolean-based • Error-based • Time-based

✅ Profile Scans (3)
High-Risk • Critical-Risk • Deep Scan

━━━━━━━━━━━━━━━━━━━━━━━━━━

⚡️ INSTALL NOW

pip install waymap==7.0.0

Or upgrade:

pip install --upgrade waymap

━━━━━━━━━━━━━━━━━━━━━━━━━━

🔗 LINKS

📦 PyPI: https://pypi.org/project/waymap/7.0.0/
🐙 GitHub: https://github.com/TrixSec/waymap
📚 Docs: https://github.com/TrixSec/waymap/blob/main/README.md

━━━━━━━━━━━━━━━━━━━━━━━━━━

💡 QUICK START

# Basic scan
waymap --target https://example.com --scan xss

# Profile scan
waymap --target https://example.com --profile high-risk

# Verbose mode
waymap --target https://example.com --scan sqli --verbose

━━━━━━━━━━━━━━━━━━━━━━━━━━

🎯 WHY UPGRADE?

Before v7.0.0:
❌ Inconsistent output formatting
❌ Different colors for different scans
❌ Varying prompt styles
❌ Result saving bugs

After v7.0.0:
✅ 100% Consistent UI/UX
✅ Professional output
✅ Reliable performance
✅ Production ready

━━━━━━━━━━━━━━━━━━━━━━━━━━

🌟 75+ WEB VULNERABILITIES

Waymap can scan for over 75 different web vulnerabilities including:
• SQL Injection (All types)
• XSS (Cross-Site Scripting)
• Command Injection
• SSTI (Template Injection)
• LFI (File Inclusion)
• CORS Misconfigurations
• CRLF Injection
• Open Redirects
• CMS-specific CVEs
• And much more!

━━━━━━━━━━━━━━━━━━━━━━━━━━

🔥 FEATURES

✅ Multi-threaded scanning
✅ Profile-based scans (High-Risk, Critical, Deep)
✅ WAF/IPS detection (160+ types)
✅ Automated crawling
✅ Result saving in JSON
✅ No-prompt mode for automation
✅ Verbose debugging mode
✅ CMS detection (WordPress, Drupal)

━━━━━━━━━━━━━━━━━━━━━━━━━━

👨‍💻 DEVELOPED BY
Trix Cyrus (Vicky)
© 2024-25 Trixsec Org

━━━━━━━━━━━━━━━━━━━━━━━━━━

⭐️ SUPPORT THE PROJECT

Star us on GitHub: https://github.com/TrixSec/waymap
Report issues: https://github.com/TrixSec/waymap/issues

━━━━━━━━━━━━━━━━━━━━━━━━━━

🎊 This is our most polished release yet!

Every scan module has been carefully standardized to provide you with a professional, consistent experience. Whether you're a penetration tester, security researcher, or ethical hacker - Waymap v7.0.0 is ready for production use!

Install now and experience the difference!

pip install waymap==7.0.0

#Waymap #WebSecurity #VulnerabilityScanner #PenTesting #EthicalHacking #CyberSecurity #InfoSec #BugBounty #SecurityTools #TrixSec

━━━━━━━━━━━━━━━━━━━━━━━━━━

💬 Join our community:
📱 Telegram: @Trixsec
🐙 GitHub: TrixSec/waymap

Happy Hacking! 🎯

Next update on 100 stars 😛

v7.1.0 - API Security, Auth & Reporting 🚀

Release Date: December 2024

Fast, Optimized, and Comprehensive Web Vulnerability Scanner

Waymap v7.1.0 introduces powerful new capabilities for API security testing, advanced authentication, and professional reporting.

🌟 What's New?

🔌 API Security Testing
REST API Scanning: Test endpoints for missing auth, IDOR, and rate limiting.

GraphQL Support: Detect introspection, query depth issues, and schema exposure.

Method Testing: Automated testing of GET, POST, PUT, DELETE, PATCH methods.

🔐 Advanced Authentication
Multi-Protocol Support: Form-based, HTTP Basic, Digest, Bearer Token, and API Key.

Session Management: Maintain authenticated sessions across scans.

Custom Headers: Inject custom authentication headers.

📊 Professional Reporting
HTML Reports: Interactive dashboards with charts and detailed findings.
CSV Exports: Spreadsheet-compatible data for analysis.
Markdown: Documentation-ready reports.
PDF Reports: Professional PDF summaries.

Search for Vulnerability 📡

SearchSploit

sudo apt-get install exploitdb
searchsploit xxx | grep linux

Dorks

site:exploit-db.com APP VERSION
site:rapid7.com "set TARGET" Sendmail
site:rapid7.com "use auxiliary" MSSQL
search type:exploit port:139
search samba type:exploit port:445

Vulnerable Scan 🎯

WhatWeb

whatweb <ip>

Golismero

golismero SCAN <ip>

Nikto

nikto -h <ip> -p 1234 <ip>
nikto -C all -h <ip> -p 80
nikto -C all -h <ip> -p 443

Nmap

nmap -v -sS -sV --script=vulscan.nse --script-args vulscandb=exploitdb.csv <ip>

nmap -sS -sV --script=vulscan.nse --script-args vulscandb=exploitdb.csv -p80 <ip>

nmap -sV --script=vuln <ip>

nmap -PN -sS -sV --script=all --script-args vulscancorrelation=1 <ip>

HTTP Enumerating 🌐

☑️Brute-force , check http , https website ,enumerate one by one
☑️Default login for service or application , check reset password
☑️Check Default credentials for software
☑️SQL-injectable GET/POST params
☑️LFI/RFI through ?page=foo type params /etc/passwd , ../../../../../boot.ini
☑️ Check config.php and get sql login
☑️ Heartbleed / CRIME find out potential correct vhost to GET , any names that could be usernames for bruteforce/guessing

Xprobe2 OS fingerprinting 👣

xprobe2 -v -p tcp:80:open <ip>

🔒 Waymap v7.2.1 Released
This release focuses on stability, reliability, and security hardening.
Highlights
• Thread-safe result saving with the new ResultManager
• Secure XML parsing using defusedxml (XXE protection)
• Improved time-based SQLi baseline to reduce false positives
• Fixed boolean and error-based SQLi detection
• Improved CRLF detection (headers + body)
• Open Redirect now works on Windows (no curl required)
• Fixed CMDi query-string handling
• Report loading fixed across all output formats
• Fixed WAF module imports and project path resolution
• Improved Windows Unicode support
All 12+ scanner modules have been updated to use the centralized ResultManager for safer, more reliable scanning.
Install

pip install waymap==7.2.1

📦 PyPI: https://pypi.org/project/waymap/7.2.1/
💻 GitHub: https://github.com/TrixSec/waymap
If Waymap has been useful to you, consider starring the repository. It helps the project grow.

🚀 Waymap v8.0.0 is now available!

This is the biggest Waymap release so far.
What's new?
• AI-powered vulnerability analysis
• AI adaptive payload generation
• AI attack surface discovery
• AI false positive reduction
• AI vulnerability chain analysis
• Union, Inline and Stacked SQLi techniques
• Database enumeration
• Event-driven architecture
• Improved crawler
• Better reconnaissance engine
• Fingerprint engine for request deduplication
• Enhanced HTTP performance and reliability
Waymap continues to use deterministic detection while AI assists with reasoning, prioritization, and analysis.

GitHub:
https://github.com/TrixSec/waymap
Feedback and bug reports are always appreciated.

Don't forget to STAR