~ / projects / scanner

Sentinel Scanner

Web security, browser extension

TypeWeb security
StatusFinished, improvements ongoing
Stack
  • JavaScript
  • Browser extension
  • Chrome / Firefox
  • XSS, SQLi, IDOR, CSRF
  • Proxy pool
View code on GitHub

Finished and usable, with active improvements ongoing.

Overview

An unpacked browser extension for web security testing inside an authenticated browser session. It runs passive recon on the page you visit (security headers, cookies, auth and session posture, and technology fingerprinting), maps same-origin links, forms, parameters and observed fetch calls, and can run confirmation-based active checks for XSS, SQL injection, IDOR, CSRF and session issues once you confirm the scope gate for that origin. It is built strictly for authorized testing, since it inherits your real browser session.

Key features

  • Passive checks for headers, cookies, auth/session posture and tech fingerprints
  • Maps same-origin links, forms, query params and fetch calls
  • Confirmation-based active tests for XSS, SQLi, IDOR, CSRF and sessions
  • Full auto scans or targeted tests on a single field, param, endpoint or raw request
  • Per-origin scope gate with an audit log, plus an optional proxy pool
  • Runs on Chrome, Edge and Brave, with a dedicated Firefox build