Exploit Mapper

A comprehensive vulnerability management platform that analyzes security scan reports, enriches vulnerability data with exploit intelligence, and provides actionable risk scoring for prioritized remediation.

Features

• Multi-Format Import: Support for CSV and Excel vulnerability reports from various scanners (Nessus, Qualys, Arctic Wolf, OpenVAS, and more)
• Automatic Column Detection: Intelligent mapping of scanner-specific column names to standard fields
• Exploit Enrichment: Automatic lookup against CISA KEV (Known Exploited Vulnerabilities) and Exploit-DB
• Risk Scoring Engine: Contextual risk scores based on CVSS, exploit availability, and asset criticality
• Manual Vulnerability Addition (Non-Systemic): The ability to manually add vulnerabilities to accept that a scanner cannot detect. Eg; Use of TLS v1 for App XYZ.
• Interactive Dashboard: Real-time risk gauge, severity breakdowns, and trend analysis
• Device Management: Track vulnerabilities by host/device with OS and criticality information
• Remediation Tracking: Status workflow, assignment, and resolution tracking
• User Authentication: Role-based access control (Admin, User, Viewer)
• Secure by Design: OWASP-compliant file validation, PBKDF2 password hashing, session management

*** The use of the CVE Enrichment process on the first upload those slow down the upload process, It will only try to enrich vulnerabilities uploaded that are marked as exploitable from your scans but timing can vary significatly depending on the uploaded file size.***

Dashboard

The dashboard provides an at-a-glance view of your security posture with:

• Overall risk score gauge
• Severity distribution charts
• Top exploitable vulnerabilities
• Remediation progress tracking

Vulnerability List

Browse, filter, and sort vulnerabilities by:

• Severity, risk score, CVSS
• Exploit availability
• CISA KEV status
• Host/device
• Status (Open, In Progress, Resolved)

Vulnerability Detail

Detailed view including:

• Scanner recommendations
• CISA KEV required actions
• Attack scenarios
• Related findings across devices
• Remediation workflow

Prerequisites

• Node.js >= 18.0.0
• npm >= 9.0.0
• Git (for cloning the repository)
• Modern web browser (Chrome, Firefox, Edge, Safari)

Installing Prerequisites

nvm install 22.12.0
nvm use 22.12.0

winget install OpenJS.NodeJS.LTS
winget install Git.Git

choco install nodejs-lts
choco install git

brew install node
brew install git

node --version
npm --version

# Using NodeSource repository for latest LTS
curl -fsSL https://deb.nodesource.com/setup_lts.x | sudo -E bash -
sudo apt-get install -y nodejs git

# Verify
node --version
npm --version

Installation

1. Clone the Repository

macOS / Linux:

git clone https://github.com/jrokz2315/exploit-mapper.git
cd exploit-mapper

Windows (Command Prompt):

git clone https://github.com/jrokz2315/exploit-mapper.git
cd exploit-mapper

Windows (PowerShell):

git clone https://github.com/jrokz2315/exploit-mapper.git
cd exploit-mapper

2. Install Dependencies

All platforms:

npm run install:all

Or install manually:

macOS / Linux:

npm install
cd server && npm install
cd ../client && npm install
cd ..

Windows (Command Prompt):

npm install
cd server && npm install
cd ..\client && npm install
cd ..

Windows (PowerShell):

npm install
cd server; npm install
cd ..\client; npm install
cd ..

Note (Windows): If you encounter errors with better-sqlite3, you may need to install the Windows build tools:

npm install --global windows-build-tools

Or install Visual Studio Build Tools with the "Desktop development with C++" workload from https://visualstudio.microsoft.com/visual-cpp-build-tools/

3. Start the Application

Development mode (with hot reload) — all platforms:

npm run dev

This starts both the backend server (port 3000) and frontend dev server (port 5173).

Production mode — all platforms:

# Build the client
npm run build

# Start the server
npm start

4. Access the Application

Open your browser and navigate to:

• Development: http://localhost:5173
• Production: http://localhost:3000

5. Default Login

On first run, a default admin account is created:

• Username: admin
• Password: Admin123!

You will be prompted to change this password on first login.

Project Structure

exploit-mapper/
├── client/                 # React frontend
│   ├── src/
│   │   ├── components/     # Reusable UI components
│   │   ├── pages/          # Page components
│   │   └── App.jsx         # Main app component
│   ├── package.json
│   └── vite.config.js
├── server/                 # Express backend
│   ├── src/
│   │   ├── db/             # Database schema and connection
│   │   ├── middleware/     # Auth middleware
│   │   ├── routes/         # API routes
│   │   └── services/       # Business logic
│   ├── data/               # SQLite database (gitignored)
│   ├── uploads/            # Temporary upload storage (gitignored)
│   └── package.json
├── package.json            # Root package with scripts
├── .gitignore
├── LICENSE
├── CONTRIBUTING.md
└── README.md

API Endpoints

Authentication

Dashboard