⬡ SentinelProxy v2.0

AI-Powered Web Application Security Audit & Proxy Suite
Developed by @who_is_the_black_hat

---

📌 Overview

SentinelProxy v2.0 is an enterprise-grade, high-performance web application security auditing suite designed as a modern alternative to Burp Suite Pro and OWASP ZAP. Built with a high-throughput Rust proxy core and integrated with Groq LLM AI & Scikit-Learn Machine Learning engines, SentinelProxy provides real-time threat detection, advanced vulnerability auditing, request interception, and automated exploitation testing.

---

🔥 Key Features & Module Overview

SentinelProxy features 32 integrated notebook modules organized into 5 core functional groups plus a floating AI Assistant:

1. ⚡ INTERCEPT & PROXY

• ⬡ Proxy (Proxy): High-speed HTTP/HTTPS Man-in-the-Middle proxy. Includes a Burp-style Sequential Intercept Queue, real-time risk scoring, raw/params/hex viewers, and HTML response rendering.
• ↺ Repeater (Repeater): Multi-tab request manipulation workspace with undo/redo history stacks, live headers/body editors, and instant resend capability.

2. 🎯 ATTACK SUITE

• ⚡ Intruder (Intruder): Automated payload attack engine supporting 4 attack vectors (Sniper, Battering Ram, Pitchfork, Cluster Bomb) with position markers (§param§).
• ⚙ AutoFuzz (AutoFuzz): AI-assisted parameter discovery and automated payload injection scanner.
• ◉ Active Scanner+ (Scanner+): Deep active vulnerability scanning engine with specialized attack probes for SQLi, XSS, RCE, LFI, SSTI, and XXE.

3. 🔍 ANALYSIS SUITE

• ⌖ Scanner (Scanner): Passive real-time traffic vulnerability auditor.
• ≡ Logger (Logger): Event and HTTP traffic logging with status code filters and data export tools.
• ◈ Highlight (Highlight): Custom regex and status code color-coding highlight rules.
• ⇄ Comparer (Comparer): Side-by-side textual and hex diff engine for requests and responses.
• ⇆ WebSocket (WebSocket): Real-time WS framing inspector, message interceptor, and payload injector.
• 🔐 Autorize (Autorize): Automated Broken Access Control (BAC) & IDOR vulnerability scanner.
• 🕷 Crawler (Crawler): Web spider and endpoint discovery sitemap generator.

4. 🛠️ TOOLS SUITE

• ⊞ Decoder (Decoder): Multi-stage URL, Base64, Hex, HTML, JWT, and Hash encoder/decoder.
• ⚿ Session Analyzer (Session): Cookie and JWT entropy calculations, SAML parser, and session randomness audit.
• ⊞ Organizer (Organizer): Notes workspace, request tagging, and bounty project organizer.
• ◎ Collaborator (Collaborator): Out-of-Band (OOB) DNS/HTTP interaction listener.
• ✦ AI Payloads (AI Payloads): Dynamic context-aware WAF bypass payload generator.
• ⚡ CSRF PoC (CSRF): One-click HTML and auto-submitting JS CSRF exploit code builder.
• ⌕ ParamMiner (ParamMiner): Hidden GET/POST HTTP parameter brute-forcing engine.
• ⚡ Race Condition (Race Condition): Single-Packet Attack (SPA) race condition tester.
• ⊕ JWT Editor (JWT Editor): Token forgery, none algorithm swap, public key confusion, and signature editor.
• ◈ GraphQL (GraphQL): Introspection runner, query depth analyzer, and batching attack tester.
• ⇢ HTTP Smuggling (Smuggler): CL.TE / TE.CL HTTP Request Smuggling analyzer.
• ⊟ TLS Inspector (TLS Inspector): SSL/TLS certificate chain auditor and cipher suite checker.
• ⚙ Intercept Rules (Intercept Rules): Dynamic condition-based auto-hold and auto-drop rules.
• ◎ Target Map (Target): Visual tree sitemap mapping all discovered host endpoints and parameters.

5. ⚙️ CONFIG & REPORTING

• ◎ Scope (Scope): Domain/IP target inclusion & exclusion whitelist/blacklist manager.
• ⇌ Match & Replace (M&Replace): Real-time request/response header & body regex modification.
• 🔗 Upstream Proxy (Upstream): SOCKS4/SOCKS5, TOR, HTTP, and Burp Suite proxy chaining.
• 🧩 Extensions (Extensions): Python extension manager (ExtensionManager).
• ⚙ Settings (Settings): Groq AI API configuration, CA Certificate installer, and UI theme customizer.
• ⬒ Report (Report): Professional HTML/PDF vulnerability bug bounty report generator.

✦ SentinelAI Assistant

• SentinelAI Chat (✦ AI CHAT): Floating conversational assistant capable of analyzing live requests, explaining vulnerabilities, generating custom payloads, and assisting in audit workflows.

---

🏗️ Architecture

SentinelProxy operates on a hybrid architecture combining a high-performance backend with a responsive desktop interface:

┌─────────────────────────────────────────────────────────────┐
│                    SentinelProxy UI (Tkinter)              │
│       (Thread-safe UI Task Queue for Python 3.14+)           │
└──────────────────────────────┬──────────────────────────────┘
                               │
                               ▼
┌─────────────────────────────────────────────────────────────┐
│                 Python Core Orchestrator                    │
│   (Database Manager, Machine Learning Risk Analysis Engine)  │
└──────────────────────────────┬──────────────────────────────┘
                               │
                               ▼
┌─────────────────────────────────────────────────────────────┐
│                 Rust Hybrid Proxy Core                      │
│     (Asynchronous HTTP/HTTPS MitM, Socket Interceptor)     │
└──────────────────────────────┬──────────────────────────────┘

---

💻 Installation & Setup

Prerequisites

• Python: 3.10 or higher
• Rust / Cargo: Required for building high-speed core bindings (optional pre-built binary included)
• Linux / macOS / Windows

Quick Start

1. Clone the Repository:

   git clone https://github.com/Mrsultan7890/sentinel-proxy.git
   cd sentinel-proxy

2. Run Automated Setup Script:

   chmod +x setup.sh
   ./setup.sh

3. Launch SentinelProxy:

   source venv/bin/activate
   python main.py

---

🌐 Browser Proxy Setup & Certificate Installation

1. Configure Browser Proxy: Set your browser's HTTP/HTTPS Proxy to:

   • Host: 127.0.0.1
   • Port: 8082

2. Install CA Certificate (For HTTPS Interception):

   • Click the ⚿ CERT button in the SentinelProxy top bar.
   • Save the sentinel_ca.crt file.
   • Import the certificate into your browser under Trusted Root Certification Authorities.

---

📁 Repository Structure

sentinel-proxy/
├── ai/                      # ML Risk Engine & Groq AI Client
│   ├── analyzer.py          # Threat aggregation logic
│   ├── groq_client.py       # Groq LLM Integration
│   └── proxy_ml_engine.py   # WAF bypass & Payload Fingerprinting
├── core/                    # Core Proxy & Rust Bridge
│   ├── async_rust_bridge.py
│   ├── proxy_core.py
│   └── rust_bridge.py
├── db/                      # High-Performance SQLite Database
│   └── proxy_db.py
├── extensions/              # Plugin & Extension Manager
├── ui/                      # Tkinter User Interface & Custom Widgets
│   ├── app.py               # Main UI Application Framework
│   └── tabs/                # Modular Tab Implementations
├── main.py                  # Entry Point
└── README.md                # Documentation

---

⚖️ Legal Disclaimer

Warning

SentinelProxy v2.0 is designed exclusively for authorized security audits, penetration testing, educational research, and bug bounty hunting on targets you own or have explicit written permission to test. Unauthorized access or scanning of third-party infrastructure is strictly prohibited. The developer assumes no liability for misuse or damage caused by this software.

---

👤 Author & Support

• Author: @who_is_the_black_hat
• Repository: https://github.com/Mrsultan7890/sentinel-proxy
• Project: SentinelProxy Security Suite v2.0