Sandcat is a lightweight multi-tabbed web browser that combines the speed and power of Chromium and Lua. Sandcat comes with built-in live headers, an extensible user interface and command line console, resource viewer, and many other features that are useful for web developers and pen-testers and when you need to examine live web applications. For more details, visit http://www.syhunt.com/sandcat/ . See also the docs directory and credits section below for a few more details about the Sandcat architecture.

Directories

/docs - Lua API documentation

- Lua API documentation /packs - contents of uncompressed pack files

- contents of uncompressed pack files /Common - common CSS, widgets and scripts package (Common.pak)

- common CSS, widgets and scripts package (Common.pak) /Resources - resources package (Resources.pak)

- resources package (Resources.pak) /src - the main executable source and built-in resource files

- the main executable source and built-in resource files /core - user interface source

- user interface source /html - user interface resources (HTML)

- user interface resources (HTML) /lua - Lua API source





Download

Compiled binaries for Windows can be downloaded from the links below.





Compiling

For compiling Sandcat, you will just need Catarinka and pLua

The entire Sandcat user interface is created during runtime, so there is no need to install third-party components in the IDE - you can just add the dependencies listed above to the library path and hit compile. It compiles under Delphi 10 Seattle down to XE2. If you are trying to compile it with Lazarus, let me know which errors you get - I will try to do the same soon.

Some work is still needed before a Mac or Linux version materializes.





ChangeLog

Request Viewer rewrite - with better display of requests and stability fixes.

Disabled the Chromium’s XSS protection when in pentest mode.

Simplified the tabbed UI - major tab code clean up and reorganization.

Added drag and drop for items in the list editor.

Fixed: occasional crash when extension called events of Lua objects.

Additional stability.





Contact

Email: felipe at syhunt.com