WSTG-based web vulnerability scanner with GUI: intercepting proxy, async mutation scan engine, 38 OWASP WSTG checks, evidence & reports