Advanced Web Application Vulnerability Scanner with AI-powered analysis, Union/Stacked/Inline SQLi, database enumeration, improved crawler, and complete module standardization. Scan for 75+ vulnerabilities.
Vulnerabilities Detected
Standardized Modules
WAF/IPS Detected
UI/UX Consistency
All 15 scan modules now have consistent formatting, professional headers, and standardized color-coded output for better readability.
Boolean, Error, Time-based, Union-Based, Stacked-Queries, and Inline-Query SQL injection detection with database enumeration and minimal false positives.
Comprehensive Cross-Site Scripting (XSS) and Server-Side Template Injection (SSTI) scanning with filter bypass payloads.
Local File Inclusion (LFI) and Command Injection (CMDi) detection with multi-threaded scanning capabilities.
Cross-Origin Resource Sharing misconfigurations and Carriage Return Line Feed injection vulnerability detection.
Recon, Misconfig, Redirect Injection, Advanced Injection, GraphQL Suite, Auth Logic, Cache/Smuggling, WordPress Extras, and Optional checks.
Optimized multi-threaded architecture for faster scanning with customizable thread counts.
LLM-driven adaptive payloads, false positive reduction, attack surface discovery, and intelligent result analysis with multi-provider support.
High-speed discovery engine with better parameter extraction, deduplication mapping, and efficient page crawling.
No-prompt mode for CI/CD integration and automated security testing workflows.
Automatic result saving in JSON format with detailed vulnerability information and timestamps.
pip install waymap==8.0.0# Basic XSS scan
waymap --target https://example.com --scan xss
# SQL Injection scan with verbose output
waymap --target https://example.com --scan sqli --verbose
# Recon scan
waymap --target https://example.com --scan recon
# Misconfiguration scan
waymap --target https://example.com --scan misconfig
# Multi-threaded scan
waymap --target https://example.com --scan all --threads 10