{"name":"arsenal: Search and Launch Pentest Commands from Your Terminal","description":"Arsenal is a Python command-line inventory and launcher for pentest commands, built for penetration testers who need quick access to hard-to-remember syntax. Search cheatsheets and inject selected commands into your terminal, with support for shared variables and tmux workflows.","github":"https://github.com/Orange-Cyberdefense/arsenal","url":"https://osrepos.com/repo/orange-cyberdefense-arsenal","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/orange-cyberdefense-arsenal","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/orange-cyberdefense-arsenal.md","json":"https://osrepos.com/repo/orange-cyberdefense-arsenal.json","topics":["python","cli","security","terminal","pentest-cheatsheets","command-launcher"],"keywords":["python","cli","security","terminal","pentest-cheatsheets","command-launcher"],"stars":null,"summary":"Arsenal is a Python command-line inventory and launcher for pentest commands, built for penetration testers who need quick access to hard-to-remember syntax. Search cheatsheets and inject selected commands into your terminal, with support for shared variables and tmux workflows.","content":"## Overview\nArsenal is a Python command-line inventory, reminder, and launcher for penetration testers. It addresses the friction of remembering and retyping complex pentest commands: search its cheatsheets, select a command, fill in arguments, and Arsenal sends the result to the terminal as user input so it works across shells and appears in command history.\n\nIt is designed for terminal-based workflows rather than as a scanner or exploitation engine. Global variables can fill recurring values such as a target IP across commands, and optional tmux modes send commands to another pane. The project is inactive, so teams should assess its current compatibility before relying on it.\n\n## Key Features\n- Search pentest command cheatsheets and launch a selected command in the terminal.\n- Fill command arguments interactively, including cheatsheet-defined defaults.\n- Set global variables such as `ip` for reuse across commands.\n- Read Markdown and reStructuredText cheatsheets, with YAML support noted among the project features.\n- Add personal cheatsheets from local directories, including `my_cheats` or `~/.cheats`.\n- Send generated commands to another tmux pane, with an option to execute them directly there.\n- Prefix generated commands, for example with `proxychains -q`.\n\n## Use Cases\n- A penetration tester wants a searchable reminder for tool syntax during an engagement instead of keeping command fragments in separate notes.\n- A tester repeatedly uses the same target values and wants to substitute a shared variable into relevant commands.\n- A terminal-focused operator wants to select commands in Arsenal while keeping work visible in a separate tmux pane.\n- A security team wants to maintain its own Markdown or reStructuredText command sheets alongside the included pentest references.\n\n## Our Take\nArsenal is a focused terminal helper for pentest command recall, but its lack of recent development means adoption should include a compatibility check and a plan for maintaining it.\n\n**Good fit if:**\n- You are a penetration tester who wants to search and launch command templates from a terminal.\n- Your workflow benefits from reusable variables, custom cheatsheets, or tmux pane integration.\n- GPL-3.0 licensing works for your intended use, and you can validate the project in your environment.\n\n**Look elsewhere if:**\n- You need an actively maintained tool: the repository is marked inactive, with no commits or releases in over a year.\n- You need a pentest engine that performs scanning or exploitation rather than a command inventory and launcher.\n- Your environment blocks terminal input injection, since the README documents a TIOCSTI-related failure and a system-level workaround.\n\n## Project Health\n\n| Signal | Value |\n|---|---|\n| Status | **Inactive**: no commits in over a year |\n| Last commit | 2024-11-29 (1.9 years ago) |\n| Commits, last 90 days | 0 |\n| Releases, last 12 months | 0 |\n| Contributors | 29 (top contributor: 48% of commits) |\n| Issues closed, last 90 days | 0 |\n| Pull requests merged, last 90 days | 0 |\n| Project age | 6 years |\n\nChecked on 2026-11-04 with the GitHub API.\n\n## Project Facts\n\n- Language: Python\n- License: GPL-3.0\n- Stars: 3.8k\n- Forks: 541\n- Archived: no\n\n## What You Need\n\nDetected in the repository:\n\n- Python (from pyproject.toml)\n- Automated checks on GitHub Actions\n\n## Getting Started\nInstall from PyPI and launch:\n\n```bash\npython3 -m pip install arsenal-cli\narsenal\n```\n\nSee the [README](https://github.com/Orange-Cyberdefense/arsenal#readme) for manual and Arch Linux installation, tmux options, and cheatsheet configuration.\n\n## License in Plain Words\n\n**GPL-3.0** (strong copyleft).\n\n- Commercial use: yes\n- Modify and redistribute: yes\n- You must keep: the license notice\n- Share your changes: yes, the full source of anything you distribute that includes it, under the GPL\n- Includes an explicit patent grant from the contributors\n\nA summary, not legal advice: the LICENSE file is what applies.\n\n## Considerations\nArsenal emulates terminal input to place commands into the active shell. The README describes a TIOCSTI-related error on some systems and suggests changing a kernel setting, including a persistent system configuration change; review that workaround carefully before using it. The project has had no commits or releases in over a year, although its contributor base is not concentrated in a single person. Python is the stated runtime, and the supplied requirements data reports no test suite. GPL-3.0 terms should also be reviewed for the way you plan to use or distribute the software.","metrics":{"detailViews":3,"githubClicks":0},"dates":{"published":null,"modified":"2026-11-04T19:45:22.000Z"}}