Sentinel is a Python-based passive reconnaissance scanner designed for penetration testers and security engineers who want quick visibility into common misconfigurations and weak points—without authentication or intrusive scanning.
It performs lightweight, contextual checks against a target web application and outputs a clean JSON report for triage, escalation, or inclusion in findings.
- 🔒 Missing Security Headers detection
- 🔐 TLS Misconfiguration & Cipher Suite Analysis (via
nmap) - 🧱 Backend Fingerprinting (headers, cookies, server tech)
- 🧪 Injection Point Detection (reflected inputs + context type)
- 🔍 Sensitive Data Exposure (API keys, tokens, secrets)
- 📦 Outdated JS/CSS/Meta Components
- 🔓 Auth Enumeration Detection (differentiated error behavior)
- 🚦 Rate Limiting Weaknesses
- 🧠 Contextual Snippets and exact endpoints included in report
python3 sentinel.py https://target.com
Install dependencies:
pip install -r requirements.txtThis project is licensed under the MIT License You can use, modify, and share this tool freely--just retain credit to the author.
Jake Boren Cybersecurity Engineer | Offensive Security LinkedIn: https://www.linkedin.com/in/jacob-boren-1337-/