Sentinel - Advanced Blackbox Security Scanner

Sentinel is a modular, high-performance security scanning framework written in Go. It is designed for authorized security assessments and penetration testing.

Features

• Reconnaissance: Passive subdomain enumeration using Certificate Transparency logs (crt.sh).
• Vulnerability Scanning:
  • Missing Security Headers (X-Frame-Options, CSP, etc.)
  • Information Disclosure (Server headers)
  • Sensitive File Detection (/.git, /.env, /robots.txt, etc.)
• Reporting: JSON output for easy integration with other tools.
• Concurrency: Fast parallel scanning.

Usage

Build the tool:

go build -o sentinel ./cmd/sentinel

Run a scan:

./sentinel -target example.com -full

Options:

• -target: Target domain (required)
• -full: Enable full scan (includes sensitive file checks)
• -concurrency: Number of concurrent workers (default: 10)
• -output: Output file (default: report.json)

Architecture

• cmd/sentinel: CLI entry point.
• pkg/recon: Reconnaissance modules (Subdomain enumeration).
• pkg/scan: Vulnerability detection logic.
• pkg/report: Reporting handling.

Disclaimer

This tool is for educational and authorized testing purposes only. Do not use on systems you do not have permission to test.