Backslash map: An Automated Vulnerability Scanner

Web application vulnerability detection is critical to cybersecurity. Web applications are vulnerable to attacks from a variety of sources, with varying degrees of scale and complexity. Therefore, it becomes essential to employ an automated tool that can effectively examine and identify vulnerabilities within the application. This research paper introduces Backslash Map, an automated system for penetration testing that enables efficient identification of web application vulnerabilities. The proposed system utilizes signature-based scanning techniques and predefined payloads. It offers key features such as subdomain enumeration (passive or active), port scanning, and detection of SQL injection, server-side template injection, and code execution vulnerabilities. During the vulnerability assessment, Backslash Map inspects and filters requests to identify vulnerable endpoints while performing subdomain enumeration on domain services. The experimental results prove the promising performance of the proposed system when compared with the state-of-the-art.