BurpSentintel - GUI Burp Plugin to ease discovering of security holes in web applications
A plugin for Burp Intercepting Proxy, to aid and ease the identification of vulnerabilities in web applications.
Searching for vulnerabilities in web applications can be a tedious
task. Most of the time consists of inserting magic chars into
parameters, and looking for suspicious output. Sentinel tries to
automate parts of this laborous task. It's purpose is not to
automatically scan for vulnerabilities (even if it can do it in certain
cases), as there are better tools out there to do that (BURP scanner for
example). So it's the only tool which sits in between manual hacking
with BURP repeater, and automated scanning with BURP scanner.
To use it, just send a suspicious HTTP request from BURP proxy to
Sentinel. Then the user is able to select certain attack patterns for
selected parameters (say, XSS attacks for parameter "id"). Sentinel will
issue several requests, with the attack patterns inserted. It will also
help find suspicious behaviour and pattern in the accompaining HTTP
responses (for example, identify decoded HTML magic chars).
Features
Big Features:
- AutomatedDetection Automated XSS/SQL Detection
- AttackLists Self-Defined Attack Lists
- Sessions Session Definition
- Categorizer Categorizer
- Reporter Generate Report
- FirefoxAddon Firefox Addon
UI Features:
BurpSentintel - GUI Burp Plugin to ease discovering of security holes in web applications
Reviewed by Zion3R
on
11:22 PM
Rating:
![BurpSentintel - GUI Burp Plugin to ease discovering of security holes in web applications](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTn-C6iV2z0YZQSgd6DFc_3CAUjC5Hn4POYDZgfcE5xVwuDlojjcCr9MffwTjkgjnCr45OHmNLjIPRPtVfwZ5kI5LY41AB0IXhOfcWcucr5qKHupKktyNzbKNKhIjXUDBtB6dUokIt0Ss/s72-c/BurpSentintel.png)