Overview

SentinelX EL — web vulnerability scanner all-in-one buatan WildanDev. 40+ modul scan (SQLi, XSS, SSRF, XXE, IDOR, JWT, race condition, dll), template engine YAML (110+ templates, compatible Nuclei schema), 8 engine (Strobe, Snipe, Clutch, Breach, gRPC, Chain, OOB Callback, Fingerprint), WAF detection + auto-bypass, dan output HTML/JSON/CSV/Markdown. Tanpa key, tanpa batasan, open source.

sxel adalah bagian dari ekosistem SentinelX — dibangun, diuji, dan dipakai sendiri dalam kegiatan security research sehari-hari WildanDev.

Install

$ go install github.com/SentinelXofficial/sxel/cmd/sxel@latest

Fitur Utama

40+ modules: SQLi, XSS, SSRF, XXE, JWT, GraphQL, HTTP Smuggling, IDOR, dll
Template engine YAML, 110+ templates, Nuclei-compatible
Strobe: adaptive scan (fingerprint → scan → chains → templates)
Snipe: deep-dive semua modul ke satu endpoint
Clutch: race condition / TOCTOU detection
Breach: OAuth 2.0 + SAML misconfiguration probe
OOB Callback: deteksi blind SSRF/XXE/CMDI
WAF detection + auto-bypass
Crawl, subdomain enum, JS endpoint extraction
Resume scan (checkpoint) & list concurrency
Output: HTML / JSON / CSV / Markdown / terminal
Self-update mechanism

Usage

Contoh pemakaian nyata dalam recon & bug hunting

Full scan semua modul + crawl

sxel -u https://target.com --all --crawl

Adaptive smart scan

sxel -u https://target.com --strobe

Deep-dive satu endpoint (semua modul)

sxel -u https://target.com/api/user/1 --snipe

Scan berbasis template

sxel -u https://target.com --templates --template-dir ./templates/

Deteksi race condition

sxel -u https://target.com --clutch

Multi-target dari file

sxel -l targets.txt --all --json-output results.json --list-concurrency 5

Crawl custom depth + WAF bypass

sxel -u https://target.com --crawl --depth 3 --waf-bypass

Auth + custom headers

sxel -u https://target.com -H "Authorization: Bearer xxx" --cookie "session=abc"

Modul spesifik + lewat proxy

sxel -u https://target.com --sql-only --blind --proxy http://127.0.0.1:8080

Lanjutkan scan yang terputus

sxel -u https://target.com --resume --checkpoint state.json

Semua engine Sprint B sekaligus

sxel -u https://target.com --strobe --snipe --clutch --breach --grpc

Update ke versi terbaru

sxel --update

Flags

Referensi lengkap semua opsi CLI

FlagDefaultDescription

Target

-u—Single target URL

-l—Multi-target from file

--list-concurrency5Concurrency for multi-target list

Scan mode

--allfalseRun all scan modules

--crawlfalseCrawl the target

--depth—Crawl depth

--strobefalseAdaptive smart scan engine

--snipefalseDeep-dive all modules on single endpoint

--clutchfalseRace condition / TOCTOU detection

--breachfalseOAuth + SAML misconfiguration probe

--grpcfalsegRPC reflection + REST gateway

--templatesfalseYAML template scanning (110+ templates)

--template-dir—Custom template directory

--resumefalseResume interrupted scan

--checkpoint—Checkpoint state file

Request

-H—Custom request headers

--cookie—Cookie for all requests

--proxy—Proxy URL (http://host:port or socks5://host:port)

--waf-bypassfalseWAF detection + auto bypass

Modules

--sql-onlyfalseRun SQL injection modules only

--blindfalseBlind injection testing

Output

--html-output—Save HTML report

--json-output—Save JSON results

--csv-output—Save CSV results

--md-output—Save Markdown report

--updatefalseSelf-update to latest release

Project Structure

Arsitektur kode yang modular dan maintainable

sxel/
├── cmd/
│   └── sxel/               # CLI entry point
├── internal/
│   ├── banner/             # ASCII banner
│   ├── color/              # Terminal colour helpers
│   ├── output/             # Console + file output (HTML/JSON/CSV/MD)
│   ├── updater/            # Self-update via GitHub releases
│   └── version/            # Version constant
└── pkg/
    ├── core/               # Core scanner engine
    ├── engine/             # Strobe, Snipe, Clutch, Breach, Chain engines
    ├── modules/            # 40+ scan modules (SQLi, XSS, SSRF, dll)
    └── payload/            # Payload & wordlist data

sxel

Overview

Install

Usage

Flags

Project Structure

Punya proyek menarik buat dibangun?