Waymap is a fast, practical web vulnerability scanner for authorized security testing. It automates SQLi, XSS, command injection, SSTI, LFI, CORS, CRLF, open redirect, API, recon, misconfiguration, and WordPress checks with session-based results, multi-threading, crawling, authentication, reporting, Google dork discovery, and AI-powered vulnerability analysis.

Key Features:

SQL Injection (boolean, error, time-based, union, stacked, inline)
Cross-Site Scripting (XSS) with context-aware detection
Command Injection (CMDi) with multiple techniques
Server-Side Template Injection (SSTI)
Local File Inclusion (LFI)
CRLF and Header Injection
CORS Misconfiguration
Open Redirect
API Security Testing (REST and GraphQL)
WordPress Security Scanning with WPScan integration
Google Dork Discovery via SerpApi
AI-powered vulnerability analysis with multiple LLM providers (OpenAI, Anthropic, Ollama, Cerebras, Groq)
Multi-threaded scanning with configurable workers
Intelligent crawling and attack surface discovery
Comprehensive reporting (HTML, CSV, Markdown, PDF)

Why it should be in Kali:

Provides comprehensive web vulnerability scanning capabilities
AI-powered analysis enhances detection accuracy
Actively maintained with regular updates
GPL-3.0 licensed (compatible with Kali)
Already successfully packaged for Debian/Kali
Useful for penetration testers and security professionals

Package Information:

Version: 8.2.1
License: GPL-3.0
Homepage: https://github.com/TrixSec/waymap
Maintainer: Trix Cyrus (Vicky) [email protected]