PwnDrop File Hosting

Key Features

• Custom URL aliases and redirects to mask payload locations and create believable social engineering scenarios
• Automatic file deletion after specified number of downloads or time period to maintain operational security
• Built-in steganography support for hiding payloads within innocent-looking image files
• Real-time download tracking and logging for monitoring payload delivery during engagements
• Password-protected file access with customizable authentication mechanisms
• Mobile-responsive web interface optimized for managing files during field operations
• Custom HTTP response codes and headers for advanced evasion techniques
• Bulk file upload and management capabilities for organizing large payload collections

Common Use Cases

• 1Red team operations requiring covert payload delivery through custom-branded file sharing portals
• 2Penetration testing engagements where payloads need to be hosted on controlled infrastructure
• 3Social engineering campaigns requiring legitimate-looking file sharing services with custom domains
• 4Security awareness training where realistic phishing scenarios need authentic-looking file hosting
• 5Bug bounty hunting operations requiring temporary payload hosting with automatic cleanup
• 6Internal security assessments where files need to be shared without leaving traces on external platforms
• 7Adversary simulation exercises requiring sophisticated payload delivery mechanisms with tracking capabilities

Prerequisites

• Docker Engine 20.10+ and Docker Compose v2 for container orchestration and networking support
• Minimum 512MB RAM and 2GB disk space for PwnDrop operation and file storage
• Available ports 80 and 443 on the host system for HTTP and HTTPS service endpoints
• Basic understanding of penetration testing workflows and payload delivery concepts
• Network configuration knowledge for setting up custom domains and DNS records if internet-facing deployment is required
• SSL certificate management experience if HTTPS functionality will be utilized in production environments

docker-compose.yml

1services: 
2  pwndrop: 
3    image: ghcr.io/kgretzky/pwndrop:latest
4    container_name: pwndrop
5    volumes: 
6      - pwndrop-data:/pwndrop/data
7      - pwndrop-admin:/pwndrop/admin
8    ports: 
9      - "80:80"
10      - "443:443"
11    networks: 
12      - pwndrop-network
13    restart: unless-stopped
14
15volumes: 
16  pwndrop-data: 
17  pwndrop-admin: 
18
19networks: 
20  pwndrop-network: 
21    driver: bridge

.env Template

1# PwnDrop
2# Access /pwndrop to set up admin account

Usage Notes

Quick Start

1# 1. Create the compose file
2cat > docker-compose.yml << 'EOF'
3services:
4  pwndrop:
5    image: ghcr.io/kgretzky/pwndrop:latest
6    container_name: pwndrop
7    volumes:
8      - pwndrop-data:/pwndrop/data
9      - pwndrop-admin:/pwndrop/admin
10    ports:
11      - "80:80"
12      - "443:443"
13    networks:
14      - pwndrop-network
15    restart: unless-stopped
16
17volumes:
18  pwndrop-data:
19  pwndrop-admin:
20
21networks:
22  pwndrop-network:
23    driver: bridge
24EOF
25
26# 2. Create the .env file
27cat > .env << 'EOF'
28# PwnDrop
29# Access /pwndrop to set up admin account
30EOF
31
32# 3. Start the services
33docker compose up -d
34
35# 4. View logs
36docker compose logs -f

One-Liner

Run this command to download and set up the recipe in one step:

1curl -fsSL https://docker.recipes/api/recipes/pwndrop-file-sharing/run | bash

Troubleshooting