PwnedHub is a vulnerable application designed exclusively for PractiSec training courses. PwnedHub contains intentional vulnerability and should never be exposed to the open Internet. This software is NOT Open Source in a traditional sense. See the LICENSE.txt file for more information.

• Docker

1. Install Docker Desktop.

2. Clone the PwnedHub repository.

   $ git clone https://github.com/lanmaster53/pwnedhub.git
   

3. Change into the PwnedHub directory.

   $ cd pwnedhub
   

4. Build the PwnedHub Docker image.

   docker-compose build
   

5. Launch the PwnedHub architecture using Docker Compose.

   docker-compose up
   

   • To launch as a daemon (no terminal logging), add the -d switch.

6. Modify the hosts file to create the following records:

   127.0.0.1   www.pwnedhub.com
   127.0.0.1   test.pwnedhub.com
   127.0.0.1   api.pwnedhub.com
   

7. Visit the applications at http://www.pwnedhub.com and http://test.pwnedhub.com.

8. When done using PwnedHub, clean up the Docker environment with the following command:

   docker-compose down
   

The repository includes launch scripts for each part of the application. The scripts still use Docker, but run each service on a development server without a reverse proxy. This allows for auto-reloading and interactive debugging.

1. Conduct steps 1-4 and 6 above.

2. Start the PwnedHub legacy application.

   $ docker-compose run -p 5000:5000 app python ./pwnedhub.py
   

3. Open a new tab and start the PwnedHub 2.0 application.

   $ docker-compose run -p 5001:5001 app python ./pwnedspa.py
   

4. Open a new tab and start the PwnedHub API.

   $ docker-compose run -p 5002:5002 app python ./pwnedapi.py
   

5. Visit the applications at http://www.pwnedhub.com:5000 and http://test.pwnedhub.com:5001.

6. When done using PwnedHub, close all tabs and clean up the Docker environment with the following command:

   docker-compose down