PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bughunters.

The basic install include a DNS server, a reverse proxy and a webserver.

• docker-machine
• sshfs (optional)
• python3
• docker-compose

You need to create a docker-machine for your server.

docker-machine create \ 
 --driver generic \
 --generic-ip-address=0.0.0.0 \
 --generic-ssh-user=root \
 --generic-ssh-key=/home/user/.ssh/id_rsa \
 your_machine_name

For more information: https://docs.docker.com/machine/drivers/generic/

required available port:

• tcp: 80 443 53
• udp: 53

On a fresh Ubuntu server installation systemd listen on port 53 you will need to shut the service down and change your dns.

systemctl disable --now systemd-resolved.service
echo "nameserver 208.67.222.222" > /etc/resolv.conf #opendns servers

You must set your host as your authoritative nameserver. You must wait for the DNS propagation or the domain verification by let's encrypt will fail.

First install the pm client.

pip install pwn-machine

or for a cutting edge build:

git clone https://github.com/yeswehack/pwn-machine/
cd pwn-machine
pip install .

On your first run you need to setup PwnMachine with

pm setup

This will start an interactive installer. The installer will create the configuration directory and add the required environment variable and autocompletion to your shell init file.

Then you can build and start all your services.

pm service build
pm service start

You can check that everything is running with

pm ps

Check the wiki for more informations.