Arsenal is just a quick inventory, reminder and launcher for pentest commands.
This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands
In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This functionality is independent of the shell used. Indeed arsenal emulates real user input (with TTY arguments and IOCTL) so arsenal works with all shells and your commands will be in the history.
You have to enter arguments if needed, but arsenal supports global variables.
For example, during a pentest we can set the variable ip to prefill all commands using an ip with the right one.
To do that you just have to enter the following command in arsenal:
Authors:
Guillaume Muh mayflyThis project is inspired by navi (https://github.com/denisidoro/navi) because the original version was in bash and too hard to understand to add features
Arsenal new features
New colors Add tmux new pane support (with -t) Add default values in cheatsheets commands with <argument|default_value> Support description inside cheatsheets New categories and Tags New cheatsheets Add yml support (thx @0xswitch ) Add fzf support with ctrl+t (thx @mgp25)Install & Launch
with pip :cd arsenal
python3 -m pip install -r requirements.txt
./run
Inside your .bashrc or .zshrc add the path to run to help you do that you could launch the addalias.sh script
Also if you are an Arch user you can install from the AUR:cd arsenal
makepkg -si
Launch in tmux mode
# if the window is already splited the command will be send to the other pane without quitting arsenal
./run -t -e # just like the -t mode but with direct execution in the other pane without quitting arsenal
Add external cheatsheets
You could add your own cheatsheets insode the my_cheats folder or in the ~/.cheats folder.
You could also add additional paths to the file <arsenal_home>/arsenal/modules/config.py, arsenal reads .md (MarkDown) and .rst (RestructuredText).
Cheatsheets examples are in <arsenal_home>/cheats: README.md and README.rst
Troubleshooting
If you got on error on color init try :
--
If you have the following exception when running Arsenal:
First, check that requirements are installed:
If the exception is still there:
Mindmap
Active directory mindmap Due to csp on github when you open the svg, we moved the AD mindmap and the source to this repository : https://github.com/Orange-Cyberdefense/ocd-mindmapshttps://orange-cyberdefense.github.io/ocd-mindmaps/img/pentest_ad_dark_2022_11.svg
AD mindmap black version
Exchange Mindmap (thx to @snovvcrash)
Active directory ACE mindmap