Hardened Architecture updates implemented in ACROMAP v5.0:
- The Sensor Layer (Python Engines)
We replaced all unreliable "text-grepping" with two dedicated Python engines: nmap_parser.py and web_parser.py.
They parse raw XML/JSON data directly.
They include WAF-Garbage Stripping and Root-Tag Guards to detect when a WAF is injecting fake HTML to blind the scanner.
2. Explicit State Degradation
The framework no longer "fails silently." If a parser or tool is blocked by a WAF, it exports a FAILURE signal. The dispatcher then logs the target's state as UNKNOWN rather than assuming it is secure. This eliminates the most dangerous False Negatives.
-
Arithmetic Hardening (10#0 Paradigm)
We refactored every math operation in the framework (latency, port counts, report totals) to use the 10#0 paradigm. This forces base-10 evaluation, making the script immune to crashes caused by empty variables or octal-character collisions (like 08 or 09). -
Memory-Resident State Bridge
We eliminated the need for preflight.sh to write state to the disk. It now uses a Memory Bridge to export WAF tokens and latency metrics directly into the main script’s RAM, improving speed and preventing race conditions. -
Behavioral Proofing Loops
Vulnerability detection has moved from "matching strings" to "proving behavior":
acromap.sh
nmap_parser.py
preflight.sh
qa_harness.sh
README.md
web_parser.py
OOB Engine: Centralized asynchronous polling for DNS/LDAP callbacks (SSRF/XSS).
Safe Execution Proofs: Verifying the reflection of unique, hashed tokens for Webshells and RCE.
Differential Analysis: Comparing server responses against "impossible paths" for LFI/SQLi.
6. Aristotelian QA Harness
We created qa_harness.sh, a 13-assertion test suite that stresses the framework's math and logic. It ensures that the "Theoretical Design" of the code matches the "Reality" of its execution on your system.
Summary: ACROMAP v5.0 is no longer just a collection of tools; it is a deterministic security engine that values "Truth over Guesswork.