{"id":49458320,"url":"https://github.com/ogrodev/fsociety","last_synced_at":"2026-04-30T08:04:29.205Z","repository":{"id":345875355,"uuid":"1157469713","full_name":"ogrodev/fsociety","owner":"ogrodev","description":"Multi-plugin marketplace for Claude Code offensive security plugins","archived":false,"fork":false,"pushed_at":"2026-03-21T17:34:50.000Z","size":1137,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-03-21T19:59:51.053Z","etag":null,"topics":["claude-code","claude-code-plugin","offensive-security","pentesting","security"],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ogrodev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-02-13T21:21:32.000Z","updated_at":"2026-03-21T17:34:53.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/ogrodev/fsociety","commit_stats":null,"previous_names":["ogrodev/fsociety"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/ogrodev/fsociety","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ogrodev%2Ffsociety","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ogrodev%2Ffsociety/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ogrodev%2Ffsociety/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ogrodev%2Ffsociety/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ogrodev","download_url":"https://codeload.github.com/ogrodev/fsociety/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ogrodev%2Ffsociety/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32458247,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-29T22:27:22.272Z","status":"online","status_checked_at":"2026-04-30T02:00:05.929Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["claude-code","claude-code-plugin","offensive-security","pentesting","security"],"created_at":"2026-04-30T08:04:08.391Z","updated_at":"2026-04-30T08:04:29.197Z","avatar_url":"https://github.com/ogrodev.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!-- prettier-ignore --\u003e\n```\n  /$$$$$$                              /$$             /$$\n /$$__  $$                            |__/            | $$\n| $$  \\__//$$$$$$$  /$$$$$$   /$$$$$$$ /$$  /$$$$$$  /$$$$$$   /$$   /$$\n| $$$$   /$$_____/ /$$__  $$ /$$_____/| $$ /$$__  $$|_  $$_/  | $$  | $$\n| $$_/  |  $$$$$$ | $$  \\ $$| $$      | $$| $$$$$$$$  | $$    | $$  | $$\n| $$     \\____  $$| $$  | $$| $$      | $$| $$_____/  | $$ /$$| $$  | $$\n| $$     /$$$$$$$/|  $$$$$$/|  $$$$$$$| $$|  $$$$$$$  |  $$$$/|  $$$$$$$\n|__/    |_______/  \\______/  \\_______/|__/ \\_______/   \\___/   \\____  $$\n                                                               /$$  | $$\n                                                              |  $$$$$$/\n                                                               \\______/\n```\n\n\u003cdiv align=\"center\"\u003e\n\n**Offensive security plugins for Claude Code**\n\n[![Claude Code Plugin](https://img.shields.io/badge/plugin-Claude_Code-7C3AED?style=flat-square)](https://docs.anthropic.com/en/docs/claude-code)\n[![Kali Linux](https://img.shields.io/badge/platform-Kali_Linux-557C94?style=flat-square\u0026logo=kalilinux\u0026logoColor=white)](https://www.kali.org/)\n[![Zero Dependencies](https://img.shields.io/badge/deps-zero-10B981?style=flat-square)](#plugin-anatomy)\n[![License](https://img.shields.io/badge/License-MIT-blue?style=flat-square)](LICENSE)\n\n[Plugins](#plugins) • [Getting Started](#getting-started) • [How It Works](#how-it-works) • [Adding a Plugin](#adding-a-plugin)\n\n\u003c/div\u003e\n\nA growing suite of Claude Code plugins for offensive security. Each plugin is a self-contained toolkit targeting a specific domain of penetration testing — web apps, reverse engineering, opsec, leak hunting, and beyond. One repo, multiple weapons, all conversational.\n\n\u003e [!CAUTION]\n\u003e **Authorized testing only.** Always obtain written authorization before testing any target. Unauthorized access to computer systems is illegal. The authors assume no liability for misuse.\n\n## Plugins\n\n| Plugin                      | Domain                     | Description                                                                                                    |\n| --------------------------- | -------------------------- | -------------------------------------------------------------------------------------------------------------- |\n| [**elliot**](./elliot/)     | Web \u0026 Application Security | Full offensive lifecycle — recon, scan, exploit, weaponize, report. 24 commands, 9 skills, 2 agents            |\n| [**romero**](./romero/)     | Reverse Engineering        | Windows binary analysis, decompilation, malware classification. 10 commands, 5 skills, 1 agent                 |\n| [**trenton**](./trenton/)   | Operational Security       | Machine hardening, VPS security, anti-forensics, footprint elimination. 12 commands, 5 skills, 2 agents        |\n| [**tyrell**](./tyrell/)     | Leak Database Hunting      | Exposed database discovery, data acquisition, cross-plugin pipeline to elliot. 16 commands, 5 skills, 2 agents |\n| [**fsociety**](./fsociety/) | Engagement Setup           | Interactive workspace wizard — targets, goals, scope, plugin selection, OPSEC profiles                         |\n| **dom**                     | Mobile \u0026 IoT               | _Planned_ — Android/iOS testing, API interception, firmware analysis                                           |\n\n### Specialized Agents\n\nEach plugin ships with AI agents designed for autonomous multi-step operations:\n\n| Agent       | Plugin  | Role                                                                |\n| ----------- | ------- | ------------------------------------------------------------------- |\n| **darlene** | elliot  | Campaign orchestrator — plans and runs multi-phase attack campaigns |\n| **scout**   | elliot  | Reconnaissance — maps attack surface before exploitation            |\n| **cipher**  | romero  | Reverse engineering orchestrator — drives binary analysis workflows |\n| **ghost**   | trenton | Opsec orchestrator — multi-phase machine hardening                  |\n| **cleaner** | trenton | Anti-forensics specialist — trace removal and footprint elimination |\n| **joanna**  | tyrell  | Leak hunter — multi-source exposed database discovery               |\n| **scott**   | tyrell  | Acquisition specialist — probe, dump, convert, and pipeline data    |\n\n## Getting Started\n\n### Prerequisites\n\n- [Claude Code](https://docs.anthropic.com/en/docs/claude-code) with MCP support\n- [Hexstrike MCP server](https://github.com/0x4m4/hexstrike-ai/) on Kali Linux (or compatible)\n- Node.js 18+\n\n### Installation\n\nAdd the fsociety marketplace, then install the plugins you need:\n\n```bash\nclaude plugin marketplace add ogrodev/fsociety\nclaude plugin install elliot@fsociety\n```\n\nNo cloning, no build step, no dependencies.\n\n\u003e [!TIP]\n\u003e You can install multiple plugins at once. Each plugin is independent — install only what you need.\n\n### Quick Start\n\nInitialize an engagement workspace with the setup wizard:\n\n```bash\n/setup my-operation\n```\n\nThe wizard walks you through targets, goals, scope, and plugin selection. It generates a tailored workspace:\n\n| File              | Purpose                                                 |\n| ----------------- | ------------------------------------------------------- |\n| `engagement.json` | Central config — targets, plugins, opsec level, scope   |\n| `CLAUDE.md`       | Tailored guidance with only your active plugin commands |\n| `scope.md`        | Formal scope definition                                 |\n| `targets.jsonl`   | Structured target list (append-only, SHA256-deduped)    |\n\n### OPSEC Profiles\n\nChoose a profile that matches your engagement's anonymity requirements:\n\n| Profile    | Speed    | Anonymity      | Use Case                  |\n| ---------- | -------- | -------------- | ------------------------- |\n| `surface`  | Maximum  | None           | Lab / CTF environments    |\n| `standard` | Moderate | Basic          | Authorized external tests |\n| `paranoid` | Slow     | Full (Tor/VPN) | Red team engagements      |\n\n## How It Works\n\nfsociety is **not** a Node.js application — there's no build step, no `package.json`, no test suite. It's a **Claude Code plugin marketplace**: a collection of markdown-driven plugins that extend Claude Code with offensive security capabilities.\n\n### Plugin Anatomy\n\nEvery plugin follows the same structure:\n\n```\nplugin-name/\n├── plugin.json           # Plugin definition (name, version, skills, agents)\n├── CLAUDE.md             # Plugin-specific guidance for Claude Code\n├── commands/*.md         # Slash commands with YAML frontmatter\n├── skills/*/SKILL.md     # Auto-activating skills with reference docs\n├── agents/*.md           # Agent definitions with YAML frontmatter\n├── scripts/*.js          # Node.js scripts (zero npm deps, stdlib only)\n└── hooks/hooks.json      # Lifecycle hooks wiring scripts to events\n```\n\n### Key Design Decisions\n\n- **Zero dependencies** — all scripts use only Node.js built-ins (`fs`, `path`, `crypto`, `child_process`)\n- **Markdown-driven** — commands, skills, and agents are `.md` files with YAML frontmatter\n- **Plugin isolation** — no cross-plugin imports or shared scripts\n- **JSONL for data** — append-only JSONL files for findings, techniques, and intel\n- **SHA256 deduplication** — all trackers deduplicate by hashing normalized key fields\n\n### Repository Structure\n\n```\nfsociety/\n├── .claude-plugin/\n│   └── marketplace.json       # Plugin registry\n├── elliot/                    # Web \u0026 Application security\n├── romero/                    # Reverse engineering\n├── trenton/                   # Operational security\n├── tyrell/                    # Leak database hunting\n├── fsociety/                  # Engagement setup \u0026 orchestration\n├── CLAUDE.md\n└── LICENSE\n```\n\n\u003e [!NOTE]\n\u003e See each plugin's own `README.md` for its complete command reference, data layer, and conventions\n\n```text\nXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nXX                                                                          XX\nXX   MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMMMMMMMMssssssssssssssssssssssssssMMMMMMMMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMMMss'''                          '''ssMMMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMyy''                                    ''yyMMMMMMMMMMMM   XX\nXX   MMMMMMMMyy''                                            ''yyMMMMMMMM   XX\nXX   MMMMMy''                                                    ''yMMMMM   XX\nXX   MMMy'                                                          'yMMM   XX\nXX   Mh'                                                              'hM   XX\nXX   -                                                                  -   XX\nXX                                                                          XX\nXX   ::                                                                ::   XX\nXX   MMhh.        ..hhhhhh..                      ..hhhhhh..        .hhMM   XX\nXX   MMMMMh   ..hhMMMMMMMMMMhh.                .hhMMMMMMMMMMhh..   hMMMMM   XX\nXX   ---MMM .hMMMMdd:::dMMMMMMMhh..        ..hhMMMMMMMd:::ddMMMMh. MMM---   XX\nXX   MMMMMM MMmm''      'mmMMMMMMMMyy.  .yyMMMMMMMMmm'      ''mmMM MMMMMM   XX\nXX   ---mMM ''             'mmMMMMMMMM  MMMMMMMMmm'             '' MMm---   XX\nXX   yyyym'    .              'mMMMMm'  'mMMMMm'              .    'myyyy   XX\nXX   mm''    .y'     ..yyyyy..  ''''      ''''  ..yyyyy..     'y.    ''mm   XX\nXX           MN    .sMMMMMMMMMss.   .    .   .ssMMMMMMMMMs.    NM           XX\nXX           N`    MMMMMMMMMMMMMN   M    M   NMMMMMMMMMMMMM    `N           XX\nXX            +  .sMNNNNNMMMMMN+   `N    N`   +NMMMMMNNNNNMs.  +            XX\nXX              o+++     ++++Mo    M      M    oM++++     +++o              XX\nXX                                oo      oo                                XX\nXX           oM                 oo          oo                 Mo           XX\nXX         oMMo                M              M                oMMo         XX\nXX       +MMMM                 s              s                 MMMM+       XX\nXX      +MMMMM+            +++NNNN+        +NNNN+++            +MMMMM+      XX\nXX     +MMMMMMM+       ++NNMMMMMMMMN+    +NMMMMMMMMNN++       +MMMMMMM+     XX\nXX     MMMMMMMMMNN+++NNMMMMMMMMMMMMMMNNNNMMMMMMMMMMMMMMNN+++NNMMMMMMMMM     XX\nXX     yMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMy     XX\nXX   m  yMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMy  m   XX\nXX   MMm yMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMy mMM   XX\nXX   MMMm .yyMMMMMMMMMMMMMMMM     MMMMMMMMMM     MMMMMMMMMMMMMMMMyy. mMMM   XX\nXX   MMMMd   ''''hhhhh       odddo          obbbo        hhhh''''   dMMMM   XX\nXX   MMMMMd             'hMMMMMMMMMMddddddMMMMMMMMMMh'             dMMMMM   XX\nXX   MMMMMMd              'hMMMMMMMMMMMMMMMMMMMMMMh'              dMMMMMM   XX\nXX   MMMMMMM-               ''ddMMMMMMMMMMMMMMdd''               -MMMMMMM   XX\nXX   MMMMMMMM                   '::dddddddd::'                   MMMMMMMM   XX\nXX   MMMMMMMM-                                                  -MMMMMMMM   XX\nXX   MMMMMMMMM                                                  MMMMMMMMM   XX\nXX   MMMMMMMMMy                                                yMMMMMMMMM   XX\nXX   MMMMMMMMMMy.                                            .yMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMy.                                        .yMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMy.                                    .yMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMMMs.                                .sMMMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMMMMMss.           ....           .ssMMMMMMMMMMMMMMMMMM   XX\nXX   MMMMMMMMMMMMMMMMMMMMNo         oNNNNo         oNMMMMMMMMMMMMMMMMMMMM   XX\nXX                                                                          XX\nXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fogrodev%2Ffsociety","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fogrodev%2Ffsociety","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fogrodev%2Ffsociety/lists"}