Acromap V5.0 Hardened

Hardened Architecture updates implemented in ACROMAP v5.0:

1. The Sensor Layer (Python Engines)
   We replaced all unreliable "text-grepping" with two dedicated Python engines: nmap_parser.py and web_parser.py.

They parse raw XML/JSON data directly.
They include WAF-Garbage Stripping and Root-Tag Guards to detect when a WAF is injecting fake HTML to blind the scanner.
2. Explicit State Degradation
The framework no longer "fails silently." If a parser or tool is blocked by a WAF, it exports a FAILURE signal. The dispatcher then logs the target's state as UNKNOWN rather than assuming it is secure. This eliminates the most dangerous False Negatives.

3. Arithmetic Hardening (10#0 Paradigm)
   We refactored every math operation in the framework (latency, port counts, report totals) to use the 10#0 paradigm. This forces base-10 evaluation, making the script immune to crashes caused by empty variables or octal-character collisions (like 08 or 09).

4. Memory-Resident State Bridge
   We eliminated the need for preflight.sh to write state to the disk. It now uses a Memory Bridge to export WAF tokens and latency metrics directly into the main script’s RAM, improving speed and preventing race conditions.

5. Behavioral Proofing Loops
   Vulnerability detection has moved from "matching strings" to "proving behavior":
   acromap.sh
   nmap_parser.py
   preflight.sh
   qa_harness.sh
   README.md
   web_parser.py

OOB Engine: Centralized asynchronous polling for DNS/LDAP callbacks (SSRF/XSS).
Safe Execution Proofs: Verifying the reflection of unique, hashed tokens for Webshells and RCE.
Differential Analysis: Comparing server responses against "impossible paths" for LFI/SQLi.
6. Aristotelian QA Harness
We created qa_harness.sh, a 13-assertion test suite that stresses the framework's math and logic. It ensures that the "Theoretical Design" of the code matches the "Reality" of its execution on your system.

Summary: ACROMAP v5.0 is no longer just a collection of tools; it is a deterministic security engine that values "Truth over Guesswork.

ACROMAP v5.0 — 30-Phase Deep Penetration Testing Framework

🔥 ACROMAP v5.0 — Initial Public Release

Automated 30-phase deep penetration testing framework for Kali Linux.

---

✨ What's in v5.0

• 🔄 32 fully automated scan phases — OSINT → Recon → Exploit → Report
• 🕵️ Zero-Day & One-Click exploit detection (Phase 31)
• ☁️ Cloud enumeration — AWS, GCP, Azure metadata & misconfig
• ☸️ Kubernetes cluster auditing (Phase 25)
• 🏢 Active Directory deep attack surface (Phase 30)
• 💉 SQLi, XSS, SSRF, CORS, JWT testing (Phases 18–28)
• 🔑 Secrets & supply chain exposure (Phase 29)
• 🌐 CIDR multi-host sweep mode
• 💾 Checkpoint & resume — interrupted scans continue from last phase
• 🔔 Real-time Slack/email notifications on CRITICAL findings
• 📊 Confidence score (0–10) auto-calculated per scan
• ⚡ 3 scan profiles — quick / standard / deep
• 🧵 GNU Parallel support for multi-job throughput

---

📋 Requirements

• Kali Linux (primary) / Debian / Ubuntu
• Run as root: sudo bash acromap.sh

---

⚖️ Legal

For authorized testing only. See [LICENSE

Acromap V5.0 bug fixed

🔥 ACROMAP v5.0 — Major Update

32-Phase automated deep penetration testing framework for Kali Linux.
This release ships significant engine rewrites, a new parallel recon system, live spinner UI, and integrity protection.

---

⚡ What's New

Parallel Recon Engine (Phases 1–3)

OSINT, DNS Enumeration, and Subdomain discovery now execute simultaneously in background jobs. An IPC file safely syncs all findings back into the parent scan state. Early recon is now up to 3x faster.

🌀 Live Braille Spinner

Every tool run now shows a real-time animated spinner (⠋ ⠙ ⠹ ⠸ ⠼ ⠴ ⠦ ⠧ ⠇ ⠏) with elapsed time. No more blank terminal during long scans.

🔒 Source Integrity Guard

_acro_guard() verifies attribution before execution. Stripped or tampered copies refuse to run and redirect to the original repository.

🖥️ Improved Auto-Escalation

Privilege chain now tries sudo first, then falls back to su root for environments without sudo. Script auto-chmod +xs itself after elevation.

🎨 Cyber-Noir Phase Display

Phase boundaries now show a rich terminal UI with current phase (XX/32), phase name, active target, and live Critical / High finding counters.

🛡️ Interrupt & Terminal Safety

Clean Ctrl+C handling via _ACROMAP_INTERRUPTED flag. stty sane resets prevent terminal corruption. Spinner and keypress code properly guards non-TTY environments.

🔗 URL Validation

Internal _is_valid_url() prevents malformed URLs reaching web-phase tools.

🏷️ New Runtime Flags

• WILDCARD_DNS — auto-detected; suppresses false-positive subdomains
• _TF_SCAN_DONE — prevents duplicate TruffleHog filesystem scans
• PARALLEL_EXECUTION_ACTIVE — switches tool wrappers to parallel-safe output mode

---

🐛 Bug Fixes

• Fixed wc -l arithmetic errors causing phase-skip logic to fail on empty files
• Fixed EUID unbound variable crash on certain Debian configurations
• Fixed terminal state corruption after interrupted spinner during parallel phases
• Fixed masscan CIDR output path collision with run_tool_timeout stdout capture
• Fixed add_vuln not writing to IPC file during parallel subshell execution

---

📋 Requirements

• Kali Linux (primary) / Debian / Ubuntu
• Run as root: sudo bash acromap.sh
• See README for full tool list

---

⚖️ Legal

For authorized penetration testing only. See LICENSE.

---

Full changelog and documentation: README.md

Full Changelog: v5.0...pen-testing

ACROMAP v5.0 — 30-Phase Deep Penetration Testing Framework

🔥 ACROMAP v5.0 — Initial Public Release

Automated 30-phase deep penetration testing framework for Kali Linux.

---

✨ What's in v5.0

• 🔄 32 fully automated scan phases — OSINT → Recon → Exploit → Report
• 🕵️ Zero-Day & One-Click exploit detection (Phase 31)
• ☁️ Cloud enumeration — AWS, GCP, Azure metadata & misconfig
• ☸️ Kubernetes cluster auditing (Phase 25)
• 🏢 Active Directory deep attack surface (Phase 30)
• 💉 SQLi, XSS, SSRF, CORS, JWT testing (Phases 18–28)
• 🔑 Secrets & supply chain exposure (Phase 29)
• 🌐 CIDR multi-host sweep mode
• 💾 Checkpoint & resume — interrupted scans continue from last phase
• 🔔 Real-time Slack/email notifications on CRITICAL findings
• 📊 Confidence score (0–10) auto-calculated per scan
• ⚡ 3 scan profiles — quick / standard / deep
• 🧵 GNU Parallel support for multi-job throughput

---

📋 Requirements

• Kali Linux (primary) / Debian / Ubuntu
• Run as root: sudo bash acromap.sh

---

⚖️ Legal

For authorized testing only. See [LICENSE