Sensillum

Sensillum is a web-based tool designed to test the behavior and security of web proxies and load balancers. It provides a suite of tests that help users evaluate how proxies handle various aspects of HTTP requests and responses, making it relevant for those assessing proxy configurations or investigating web application firewall (WAF) protections.

The platform offers specific tests such as checking whether a proxy properly strips spoofed headers, measuring header size limits by sending either a single large header or multiple combined headers, and determining the maximum URL path or query string length accepted by the proxy. Sensillum also includes a header character test to see how the proxy processes high-ASCII bytes in both request and response headers. For WAF assessment, it allows users to send known attack strings through headers, URL paths, or query parameters to check if the WAF blocks them on ingress, and to request the server to send attack strings back in response bodies or headers to test egress protections.

The tool displays connection history and provides options for managing cookies, including deleting cookies and handling HttpOnly cookies by expiring them through a server request.

Overall, Sensillum is positioned as a specialized platform for testing and analyzing web proxy and WAF behaviors, with features tailored to security testing and proxy validation scenarios.