inflictx/Arsenal
Offline-first, searchable arsenal for pentesting & bug bounty: payloads, a click-to-build command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells, checklists & an engagement tracker.
Active-probe security auditor for self-hosted Hasura GraphQL: proves open introspection, the anonymous 'public' unauthorized role leaking tables/rows, and an unauthenticated console — anonymously, no admin secret. Zero deps, MIT.
Appears on
Quick read
Latest capture 2026-10-26 09:59
Compare the starting count and capture dates, not just the percentage. How to read GitHub star growth. Missing history is not zero growth.
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
1 observed capture since 2026-10-26. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Offline-first, searchable arsenal for pentesting & bug bounty: payloads, a click-to-build command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells, checklists & an engagement tracker.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
AI-powered SQL query diagnostics across PostgreSQL, MySQL, Oracle, SQL Server and SQLite. No database connection required.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.