Overview

SentinelX LF — enumerator halaman login buatan WildanDev. Mengetes 70+ path login bawaan (admin panel, CMS, API auth, SSO/SAML) dengan confidence-based scoring, deteksi tech stack (18 platform) dan WAF/CDN (7 vendor), plus hints credential default. Cocok untuk recon dan penetration testing.

sxlf adalah bagian dari ekosistem SentinelX — dibangun, diuji, dan dipakai sendiri dalam kegiatan security research sehari-hari WildanDev.

Install

$ go install github.com/SentinelXofficial/sxlf@latest

Fitur Utama

Confidence-based login detection (scoring sampai threshold 3, cap 10)
70+ built-in paths: login, admin, CMS, API auth, SSO/SAML, control panel
Custom wordlist support
Tech detection: PHP, ASP.NET, Laravel, WordPress, React, dll (18 platform)
WAF/CDN detection: Cloudflare, Sucuri, Akamai, CloudFront, dll
Default credential hints (--cred)
Input: single URL, file, atau stdin pipe
Concurrency & rate limiting (jaga stealth)
Proxy support: HTTP/HTTPS/SOCKS5 (termasuk autentikasi)
Output: txt / JSON / CSV, silent mode
Self-update mechanism

Usage

Contoh pemakaian nyata dalam recon & bug hunting

Basic scan satu target

sxlf --target https://example.com

Verbose + hints credential default

sxlf --target https://example.com --verbose --cred

Custom wordlist + output JSON

sxlf --target https://example.com --wordlist paths.txt --json results.json

Bulk scan dengan rate limiting

sxlf --file targets.txt --threads 30 --rate 50 --output hits.txt

Lewat SOCKS5 proxy (misal Tor)

sxlf --target https://example.com --proxy socks5://127.0.0.1:9050

Silent mode — pipe ke tools lain

sxlf --target https://example.com --silent | tee found.txt

Target dari stdin

cat targets.txt | sxlf --threads 20 --output hits.txt

Update ke versi terbaru

sxlf --update

Flags

Referensi lengkap semua opsi CLI

FlagDefaultDescription

Input

--target—Single target URL

--file—File with target URLs (one per line, # for comments)

--wordlist—Custom path wordlist to append to built-in paths

Request

--threads10Number of concurrent workers

--timeout10Request timeout in seconds

--retry0Retries on connection failure

--rate0Max requests per second (0 = unlimited)

--header—Custom request headers: Key:Val;;Key2:Val2

--proxy—Proxy URL (http://host:port or socks5://host:port)

--follow-redirectsfalseFollow HTTP redirects

Output

--output—Save matched login URLs to a text file

--json—Save full results as JSON

--csv—Save full results as CSV

--silentfalsePrint matched URLs only (pipe-friendly)

--verbosefalseShow all probed paths, not just hits

Display toggles

--no-techfalseDisable tech-stack detection output

--no-waffalseDisable WAF/CDN detection output

--no-titlefalseDisable page title display

--no-sizefalseDisable content-length display

--credfalseShow default credential hints

--sigfalseShow detected login signals

Misc

--update—Update sxlf to the latest release

Project Structure

Arsitektur kode yang modular dan maintainable

sxlf/
├── main.go                    # CLI entry point, worker pool, job dispatch
└── internal/
    ├── banner/banner.go       # ASCII banner
    ├── color/color.go         # Terminal colour helpers
    ├── detect/detect.go       # Login, tech, WAF, title, and credential detection
    ├── output/output.go       # Console printing and file saving (text/JSON/CSV)
    ├── scanner/scanner.go     # HTTP client, job struct, CheckPath logic
    ├── updater/updater.go     # Self-update via GitHub releases
    └── version/version.go     # Version constant (v1.0.0)

sxlf

Overview

Install

Usage

Flags

Project Structure

Punya proyek menarik buat dibangun?