Arsenal Variables
Current UI substitution
When a command is copied from the Arsenal panel, PentestPath currently replaces only a small set of variables in the UI layer.
| Variable | Current behavior |
|---|---|
$TARGET | Replaced with the current target IP if present |
$TARGET_DOMAIN | Replaced with the current target value |
$TARGET_NAME | Replaced with the static string target |
$LHOST | Replaced with 127.0.0.1 |
Important limitation
The bundled Arsenal data contains additional placeholders in some commands, but they are not all resolved automatically in the current UI. Review commands before execution and adapt any remaining values manually.
Recommendation
Treat copied commands as starting points. Validate:
- target hostnames
- ports
- credentials
- URLs
- local callback IPs