https://github.com/dobin/BurpSentinel
GUI Burp Plugin to ease discovering of security holes in web applications
https://github.com/dobin/BurpSentinel
Last synced: 10 months ago
JSON representation
GUI Burp Plugin to ease discovering of security holes in web applications
- Host: GitHub
- URL: https://github.com/dobin/BurpSentinel
- Owner: dobin
- License: gpl-3.0
- Created: 2013-05-27T19:02:08.000Z (over 12 years ago)
- Default Branch: master
- Last Pushed: 2017-03-26T14:14:45.000Z (almost 9 years ago)
- Last Synced: 2025-04-08T23:53:38.491Z (10 months ago)
- Language: Java
- Homepage: https://github.com/dobin/BurpSentinel/wiki
- Size: 16.2 MB
- Stars: 150
- Watchers: 18
- Forks: 32
- Open Issues: 17
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# Burp Sentinel
Eases discovery of common security holes in web applications.
* Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction
* Blog: http://dobin.github.io/
With BurpSentinel it is possible for the penetration tester to quickly and easily
send a lot of malicious requests to parameters of a HTTP request. Not only that,
but it also shows a lot of information of the HTTP responses, corresponding to the
attack requests. Its easy to find low-hanging fruits and hidden vulnerabilities
like this, and allows the tester to focus on more important stuff!
## Features
* Attack payloads already inside
* Identification of reflected XSS, and stored XSS
* Identification of SQL injections (non-blind)
* Indicators and visual aid for the user to identify blind/fullblind SQL injections
* Diff original and modified requests easily
## Other
What it cannot do:
* Find DOM Injections
* Exploit vulnerabilities
Alternatives:
* Ironwasp (www.ironwasp.org, .NET)
* Wfuzz (www.edge-security.com/wfuzz.php, Python)