Expanding Artemis Coverage with Improved Discovery and Vulnerability Detection
Artemis currently requires all targets to go through the full discovery pipeline even when the HTTP endpoint is already known, lacks deep crawling capabilities, leaves non-CMS technology detection results unused, has no frontend authentication, and is missing detectors for several common vulnerability classes. This project addresses these gaps by enabling direct URL scanning to bypass unnecessary enumeration, replacing the single-page BeautifulSoup crawler with a Katana + uro + gf pipeline for deep crawling, making Wappalyzer's technology detection actionable through intelligent task routing to downstream modules, adding token auto-generation and session-based frontend authentication, and implementing three new vulnerability detectors: SSTI (via TInjA), OS command injection, and NoSQL injection (error-based). All work follows Artemis's existing Karton module conventions with no architectural changes required.
Project details
Technologies
Not listed in the archive