Cyber Risks · PortSwigger Research

Sentinel

Summary: Sentinel is a Burp Suite extension, authored by Dobin Rutishauser at version 0.9.1 and last updated 20 December 2022, that helps test for vulnerability categories including XSS and SQL injection. A user selects an HTTP request and chooses "Send to Sentinel" from the context menu, after which the extension issues requests with attack patterns inserted and analyzes the resulting HTTP responses to try to find vulnerabilities.

What's compelling: PortSwigger states that extensions are written by third-party users of Burp and makes no warranty about their quality or usefulness, so a tool that automatically fires attack requests at your applications carries that caveat into your testing pipeline.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related