Pwnbox

Pwnbox is a hands-on ethical-hacking playground that fits in your pocket. Work a complete attack from open-source recon all the way to root — using the real tools and the real command syntax, against targets that live entirely inside the app.

Everything is simulated. There is no real network access: Pwnbox never touches a real host, so you can practise anywhere, offline, without breaking a single law or term of service. It is a safe sandbox for learning, skill-building and CTF warm-ups.

REAL TOOLS, REAL COMMANDS • Recon & OSINT: whois, dig, theHarvester • Enumeration & web: nmap, gobuster, curl, sqlmap, a built-in browser with View Source • Exploitation: searchsploit, hydra, ssh, netcat listeners, msfvenom payloads • Reversing: file, strings, checksec, nm, objdump, ltrace and interactive gdb / radare2 • Archives: wget, unzip, zip2john, fcrackzip, john • Privilege escalation: sudo, linpeas, SUID hunting — plus a macOS target with dscl, security and launchd

LEARN BY DOING • Guided missions walk you through the full kill-chain: OSINT, enumeration, web exploitation, initial foothold, privilege escalation • Staged hints move from concept to tool to the exact command, so you are never stuck but always learning • Objectives are checked against what you actually do — no multiple choice, you run the commands

BUILT FOR MOBILE • A real terminal with a hybrid input: tap a tool, pick its flags from labelled chips, tap discovered hosts and paths • Switch between terminal and a visual browser to inspect pages and their source • Your progress and score are saved per scenario

SCENARIOS • Operation Vaultline — a black-box Linux engagement: footprint the domain, break a SQL-injection login, crack the dump, pivot over SSH and escalate to root • Cupertino — a macOS target: brute SSH, enumerate with dscl and the keychain, then hijack a writable LaunchDaemon to become root

Pwnbox is an educational tool. Only ever use these techniques on systems you own or are explicitly authorised to test.

Made by treeinspired.

Discovery signals