Arsenal is just a quick inventory, reminder and launcher for pentest commands.
This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands
In arsenal you can search for a command, select one and it’s prefilled directly in your terminal. This functionality is independent of the shell used.
Indeed arsenal emulates real user input (with TTY arguments and IOCTL) so arsenal works with all shells and your commands will be in the history.
You have to enter arguments if needed, but arsenal supports global variables.
For example, during a pentest we can set the variable ip to prefill all commands using an ip with the right one.
To do that you just have to enter the following command in arsenal:
>set ip=10.10.10.10Authors:
This project is inspired by navi because the original version was in bash and too hard to understand to add features
<argument|default_value>python3 -m pip install arsenal-clialias a='arsenal')arsenalgit clone https://github.com/Orange-Cyberdefense/arsenal.git
cd arsenal
python3 -m pip install -r requirements.txt
./runInside your .bashrc or .zshrc add the path to run to help you do that you could launch the addalias.sh script
./addalias.shAlso if you are an Arch user you can install from the AUR:
git clone https://aur.archlinux.org/arsenal.git
cd arsenal
makepkg -siOr with an AUR helper like yay:
yay -S arsenal./run -t # if you launch arsenal in a tmux window with one pane, it will split the window and send the command to the otherpane without quitting arsenal
# if the window is already splited the command will be send to the other pane without quitting arsenal
./run -t -e # just like the -t mode but with direct execution in the other pane without quitting arsenalYou could add your own cheatsheets insode the my_cheats folder or in the ~/.cheats folder.
You could also add additional paths to the file <arsenal_home>/arsenal/modules/config.py, arsenal reads .md (MarkDown) and .rst (RestructuredText).
CHEATS_PATHS = [
join(BASEPATH, "cheats"), # DEFAULT
join(HOMEPATH, "docs/my_cheats")
]Cheatsheets examples are in <arsenal_home>/cheats: README.md and README.rst
If you got on error on color init try :
export TERM='xterm-256color'—
If you have the following exception when running Arsenal:
ImportError: cannot import name 'FullLoader'First, check that requirements are installed:
pip install -r requirements.txtIf the exception is still there:
pip install -U PyYAML—
If you encounter an exception similar to the following (contains TIOCSTI in strace) when running Arsenal:
[...]
fcntl.ioctl(stdin, termios.TIOCSTI, c)
OSError: [Errno 5] Input/output errorThen you may need to re-enable TIOCSTI:
sudo sysctl -w dev.tty.legacy_tiocsti=1Active directory mindmap
Pystinger is a Python-based tool that enables SOCKS4 proxying and port mapping through webshells. It…
Introduction When it comes to cybersecurity, speed and privacy are critical. Public vulnerability databases like…
Introduction When it comes to cybersecurity, speed and privacy are critical. Public vulnerability databases like…
If you are working with Linux or writing bash scripts, one of the most common…
What is a bash case statement? A bash case statement is a way to control…
Why Do We Check Files in Bash? When writing a Bash script, you often work…