Skip to content
Get packs

fsociety

A Python 2 bundle of penetration testing scripts, many themed on Mr. Robot.

GitHub Download source
Stars
12.4k
Forks
2.1k
Licence
MIT
Language
Python
Last update
4 months ago
Type
Dev tool

What it is

fsociety is a collection of security testing scripts packaged together under one menu. The README groups them into areas such as information gathering, password attacks, wireless testing, web hacking and post-exploitation, and says the tools were used in the Mr. Robot TV series. It is meant for people who want to run these tools against systems they are allowed to test. The README describes it as a Python 2 project and points to a separate Python 3 fork.

  • Run Nmap, sqlmap or WPScan from one menu during a security lab exercise
  • Scan a web application for SQL injection or XSS using bundled tools such as sqlmap and XSStrike
  • Test a WordPress or Joomla site with the included scanners in a controlled environment
  • Practice information gathering such as port scanning and host-to-IP lookups on your own lab machines

Great for

  • Security students who want to read and run a range of classic pentest scripts in one place
  • Penetration testers working on systems they have explicit written permission to test
  • People studying how common web and network attacks are scripted
  • Users who are comfortable with Linux, Docker or Termux command-line setups

Not ideal for

  • Anyone without written permission to test a target, since these tools are for attacking systems and misuse is illegal
  • Beginners who need guidance on what each tool does and when to use it, because the README gives only short names and little documentation
  • Users who need Python 3 support, since the README says this version works with Python 2 and points to fsociety-team/fsociety for Python 3
  • Teams that need maintained, documented tooling, because the README shows no release history and the project is a bundle of third-party tools
Step-by-step guide: how to use fsocietyInstall, first run, examples, tips and FAQs

How to get it

  1. 1

    See the README

    You'll need: Python 2.7 (per the README badge and description) · Docker and docker-compose if using the Docker route · Termux on Android, or a Linux shell, for the script-based install

    Linux or Termux one-line install (from README)

    bash <(wget -qO- https://git.io/vAtmB)

    Build the Docker image (from README)

    docker-compose build

    Start the Docker container in the background (from README)

    docker-compose up -d

    Open the fsociety menu inside the container (from README)

    docker-compose exec fsociety fsociety
  2. 2

    Run it

    • Install using the Linux or Termux one-line script, or build the Docker image
    • If using Docker, start the container with docker-compose up -d
    • Open the fsociety menu with the fsociety command, or inside the container with docker-compose exec fsociety fsociety
    • Pick a category such as Information Gathering and choose a tool from the list
    • When finished with the Docker setup, run docker-compose down to destroy the instance
  3. 3

    Get the most out of it

    • Use the Docker setup to keep the Python 2 environment separate from your system Python
    • Use the Information Gathering tools such as Nmap and Host To IP to map a lab network before running other tools
    • Check the fsociety-team/fsociety fork if you need Python 3 support, as the README directs
    • Read each bundled tool's own documentation, since the README gives only short names

Downloads

Source code (.zip)master branch · straight from GitHub

Strengths

  • Bundles many well-known security tools, including Nmap, sqlmap and Reaver, in one menu
  • Installs through a single script on Linux and Termux, and also runs in Docker
  • Released under the MIT license, which permits reuse with few restrictions

Trade-offs

  • The README says it runs on Python 2, which has been end-of-life for years, so it may be hard to run on modern systems
  • Many tools are third-party scripts with uneven documentation, and the README offers little on how each one works or is maintained
  • The README does not state a version or release, and its install script is fetched from a short link, so users cannot easily verify what it runs

How it compares

ProjectStarsTypeLevelUpdatedBest for
fsociety (this)12.4kDev tooladvanced4 months agoSecurity students who want to read and run a range of classic pentest scripts in one place
hacker-roadmap15.7kCurated listbeginner3.1 years agoBeginners who want an overview of penetration testing concepts and vocabulary
sherlock95.4kCLIintermediate4 days agoSecurity researchers doing authorized open-source intelligence work
v2ray-core34.7kOtheradvanced5 days agoDevelopers who want to build and configure their own proxy server
spiderfoot24.2kAppintermediate7 months agoSecurity professionals doing reconnaissance during penetration tests or red team exercises
reactotron15.6kDev toolintermediate3 months agoReact Native developers who want to see app state and network calls while debugging

Stats synced from GitHub. The assessment above was drafted with AI from the project's README on 2026-10-29 and may miss recent changes — check the README before relying on a command. MIT licence: free to use, modify and distribute, including commercially, as long as you keep the copyright notice.