----------------
🛠️ Tool
===================
arsenal-ng is a modern penetration testing command launcher written in Go, inspired by the original arsenal project from Orange-Cyberdefense but rewritten from scratch with a focus on simplicity and speed. It ships with 238 tools and 2830 commands preloaded, searchable through a terminal user interface.
Purpose and Architecture
Pentesters regularly work with dozens of tools, each with hundreds of flag combinations. Remembering exact syntax for nmap scan types, ffuf rate limits, or sqlmap injection parameters is impractical across engagements. The original arsenal project addressed this with searchable command cheatsheets. arsenal-ng rebuilds the concept as a single Go binary with no runtime dependencies, launching in milliseconds.
The TUI accepts multi-word fuzzy search across tool names, titles, tags, descriptions, and command text. Typing nmap scan or ffuf narrows results in real time. Each tag gets a consistent, distinct color based on its hash value for quick visual identification.
Key Technical Features
The argument system supports {{arg}} placeholders with optional defaults ({{arg|default}}) and auto-completion. Commands become templatized for recurring workflows. Global variables extend this further. Setting set target=10.10.10.10 once propagates that value across every command using the corresponding placeholder, removing repetitive manual input.
Commands write directly to the terminal input buffer rather than the clipboard. You select a command, it appears in your prompt, and you edit before executing. No window switching, no clipboard management.
The YAML cheatsheet format enables straightforward extension. Teams can create methodology-specific command sets, version them with engagement documentation, and share across members. Syntax highlighting color-codes command text for readability. The built-in tools view presents all 238 tools with command counts in a paginated table. An interactive help screen accessible via ? displays all shortcuts.
Platform Support
Linux requires kernel 6.2+ for terminal prefill. Older distributions on kernel 5.x lose the prefill feature, though the tool otherwise functions. macOS works natively. Windows is supported only through WSL. Native CMD and PowerShell are not supported. Go 1.24.0 or higher is required.
Practical Assessment
For pentesters working across large toolsets, arsenal-ng provides a functional workflow improvement over shell aliases and text notes. The YAML format supports team-specific customizations. Terminal prefill avoids clipboard dependency. The kernel 6.2+ requirement for Linux prefill is a constraint in older environments. Haven't tested personally.
🔹 arsenalng #pentesting #commandlauncher #tool #redteam
🔗 Source: https://github.com/halilkirazkaya/arsenal-ng
You've seen all posts