feat: Sentinel v2.0 - Major security scanner upgrade#1
Open
Valisthea wants to merge 1 commit intoeawhitehat:mainfrom
Open
feat: Sentinel v2.0 - Major security scanner upgrade#1Valisthea wants to merge 1 commit intoeawhitehat:mainfrom
Valisthea wants to merge 1 commit intoeawhitehat:mainfrom
Conversation
Reconnaissance: - Add DNS bruteforce with 100+ subdomain wordlist - Add DNS resolution filtering for live hosts - Improve crt.sh parser (wildcards, multi-line entries) Scanning: - Expand security headers from 3 to 9 (HSTS, Permissions-Policy, Referrer-Policy, COOP, CORP) - Expand sensitive file detection from 4 to 35+ paths (Docker, AWS, Spring Boot, GraphQL, Swagger) - Add TLS/SSL analysis (protocol version, certificate expiry, self-signed detection) - Add CORS misconfiguration detection (wildcard, reflected origin, credentials leak) - Add HTTP methods audit (PUT, DELETE, TRACE via OPTIONS probing) - Add extended info disclosure (X-Powered-By, ASP.NET headers) - Add CVSS v3.1 scoring and remediation guidance per finding Reporting: - Add HTML report with dark theme, severity breakdown, and risk gauge - Add weighted risk score (0-10) with severity levels - Restructure JSON output with full metadata CLI & Configuration: - Add YAML config file support (sentinel.yml) - Add proxy, rate limiting, custom User-Agent, verbose mode - Add granular scan control flags (--no-html, --no-dns-brute, --no-resolve) - Add colored logging with ASCII banner and phase display Engineering: - Add 19 unit tests (config, scan, report) with httptest - Add GitHub Actions CI/CD (test, cross-compile build, lint) - Add .gitignore - Clean up shipped binary and sample report
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Major upgrade of Sentinel from a basic header/file scanner to a comprehensive blackbox security assessment framework.
What's new
Reconnaissance
Scanning — 6 new modules
Reporting
CLI & Configuration
sentinel.yml)--no-html,--no-dns-brute,--no-resolveEngineering
httptest(config, scan, report).gitignoreadded, shipped binary and sample report removedStats
Test plan
go test -v ./...— 19/19 PASSgo build -o sentinel ./cmd/sentinel— builds successfully (8.6 MB)example.com— 30 findings in 4scrawl,fuzz,vuln_server) preserved and untouched