Pwnbox

Hands-on ethical hacking

Only for Mac

Free

Mac

A pocket pentest lab: run real recon, web, exploitation and privilege-escalation commands on fully simulated targets. Great for CTF practice. 100% offline. Pwnbox is a hands-on ethical-hacking playground that fits in your pocket. Work a complete attack from open-source recon all the way to root — using the real tools and the real command syntax, against targets that live entirely inside the app. Everything is simulated. There is no real network access: Pwnbox never touches a real host, so you can practise anywhere, offline, without breaking a single law or term of service. It is a safe sandbox for learning, skill-building and CTF warm-ups. REAL TOOLS, REAL COMMANDS • Recon & OSINT: whois, dig, theHarvester • Enumeration & web: nmap, gobuster, curl, sqlmap, a built-in browser with View Source • Exploitation: searchsploit, hydra, ssh, netcat listeners, msfvenom payloads • Reversing: file, strings, checksec, nm, objdump, ltrace and interactive gdb / radare2 • Archives: wget, unzip, zip2john, fcrackzip, john • Privilege escalation: sudo, linpeas, SUID hunting — plus a macOS target with dscl, security and launchd LEARN BY DOING • Guided missions walk you through the full kill-chain: OSINT, enumeration, web exploitation, initial foothold, privilege escalation • Staged hints move from concept to tool to the exact command, so you are never stuck but always learning • Objectives are checked against what you actually do — no multiple choice, you run the commands BUILT FOR MOBILE • A real terminal with a hybrid input: tap a tool, pick its flags from labelled chips, tap discovered hosts and paths • Switch between terminal and a visual browser to inspect pages and their source • Your progress and score are saved per scenario SCENARIOS • Operation Vaultline — a black-box Linux engagement: footprint the domain, break a SQL-injection login, crack the dump, pivot over SSH and escalate to root • Cupertino — a macOS target: brute SSH, enumerate with dscl and the keychain, then hijack a writable LaunchDaemon to become root Pwnbox is an educational tool. Only ever use these techniques on systems you own or are explicitly authorised to test. Made by treeinspired.

Ratings & Reviews

  • This app hasn’t received enough ratings or reviews to display an overview.

The developer, treeinspired GmbH, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary, for example, based on the features you use or your age. Learn More

    Accessibility

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Information

    Seller
    treeinspired GmbH
    Size
    529.7 KB
    Category
    Education
    Compatibility
    Requires macOS 14.0 or later.
    • Mac
      Requires macOS 14.0 or later.
    Languages
    English
    Age Rating
    4+
    Copyright
    © 2026 treeinspired GmbH
  • Developer Website
  • Privacy Policy

    • More by treeinspired GmbH