ogrodev-fsociety

A marketplace containing five security plugins for Kali Linux, a Linux system used for security testing. The plugins cover penetration testing, Windows program analysis, system hardening, and related security work.

In plain words
What is it for?
It is for authorized security assessments, examining Windows binaries, improving machine security, and related defensive or offensive-security tasks.
Why use it?
It groups several security-focused tools in one installable collection. The listing does not provide enough detail about all five plugins to describe the rest precisely.

Plugin for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Claude Code
/plugin marketplace add ogrodev/fsociety
agentmods
npx agentmods add plugins/ogrodev/fsociety/marketplace
Clone the repo
git clone --depth 1 https://github.com/ogrodev/fsociety

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade C, and why

ogrodev-fsociety scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Harvests environment variableshighData exfiltration

Enumerating or grepping the environment for keys collects credentials unrelated to what the mod says it does.

"description": "Romero — reverse engineering plugin with Hexstrike MCP integration for Kali Linux. Analyze Windows binaries, extract secrets, decompile, classify malware, and diff patches.",
.claude-plugin/marketplace.json · 53 lines

What it actually says

{
	"name": "ogrodev-fsociety",
	"metadata": {
		"description": "Marketplace for red team and offensive security plugins developed by ogrodev.",
		"version": "1.0.0"
	},
	"owner": {
		"name": "Ogrodev"
	},
	"plugins": [
		{
			"name": "elliot",
			"description": "Elliot — offensive security engagement plugin with Hexstrike MCP integration for Kali Linux. Provides slash commands, auto-activating skills, and subagents for systematic penetration testing workflows.",
			"source": "./elliot/",
			"author": {
				"name": "Ogrodev"
			}
		},
		{
			"name": "romero",
			"description": "Romero — reverse engineering plugin with Hexstrike MCP integration for Kali Linux. Analyze Windows binaries, extract secrets, decompile, classify malware, and diff patches.",
			"source": "./romero/",
			"author": {
				"name": "Ogrodev"
			}
		},
		{
			"name": "trenton",
			"description": "Trenton — operational security plugin with Hexstrike MCP integration for Kali Linux. Machine hardening, VPS security, anti-forensics, and footprint elimination.",
			"source": "./trenton/",
			"author": {
				"name": "Ogrodev"
			}
		},
		{
			"name": "tyrell",
			"description": "Tyrell — leak database hunter plugin with Hexstrike MCP integration for Kali Linux. Exposed database discovery, data acquisition, cross-plugin pipeline to elliot.",
			"source": "./tyrell/",
			"author": {
				"name": "Ogrodev"
			}
		},
		{
			"name": "fsociety",
			"description": "fsociety — engagement workspace setup and cross-plugin orchestration. Interactive /setup wizard for targets, goals, scope, and plugin selection.",
			"source": "./fsociety/",
			"author": {
				"name": "Ogrodev"
			}
		}
	]
}
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 53 lines scan C de48e9ad1373

Subscribe to this mod's changes

ogrodev-fsociety is a plugin published in the GitHub repository ogrodev/fsociety (20 stars, last pushed 5mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it C with 1 finding (harvests environment variables). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.