Qolam_Hacker 0.19.1 - Web Penetration Testing for Windows

Qolam_Hacker 0.19.1 — Web Penetration Testing

One primary Scan Website action, improved JavaScript/API mapping, stronger session controls and clearer verification evidence. The Windows app is ready to download below.

Install

Download Qolam_Hacker_0.19.1_Windows-x64.zip, extract the complete ZIP and open Qolam_Hacker.exe. Keep _internal beside it. Python is not required. The app and download filenames use the same Qolam_Hacker name.

Browser confirmation requires a normally installed, signed Edge or Chrome. Optional ZAP/Nmap are separate installations. Complete setup and user guide.

Changes

• One-button automatic assessment; optional session/API setup is available by right-clicking Scan.
• Bounded same-origin application relationships with script/route/source-map provenance.
• Structured source-map validation and redacted credential-shaped findings.
• Comment/string-aware static flow candidates with reassignment and scope controls.
• Two-origin CORS controls and two independent benign arithmetic challenges.
• Anonymous session-canary controls, repeated access observations and secondary-account revalidation.
• No automatic adjacent-object ID guesses, server-loopback SSRF probes or method-override POSTs.
• Visible API-discovery attempts, consistent native request counts, and storage/export redaction.
• Existing Word, HTML, Markdown and JSON report integrations retained.

Verification

270 source tests passed. The packaged EXE recorded 31 website requests matching 31 server-observed requests on a disposable loopback target. Packaged checks verified application mapping, source maps, token redaction, repeatable arithmetic evidence, database persistence, JSON export and actual Word generation/reopening.

The 13-case lexical JavaScript subset had TP 4, TN 9, FP 0 and FN 0. This is a small labeled corpus, not a general detection benchmark. See the coverage audit.

Download checks and status

Compare your ZIP's SHA-256 with SHA256SUMS_0.19.1.txt. Matching application source is included in the package and offered separately. VERIFICATION_0.19.1.json contains the runtime verification summary.

Unsigned Windows release candidate. Native macOS/Linux packages, completed visual Word layout review, independent audit and exhaustive vulnerability coverage are not claimed. Use only within written authorization.