Command Reference
A comprehensive list of all available commands in the pwnity CLI, organized by category.
help <command> inside the CLI to get interactive help for any specific command.Core Workflow
Commands central to the offensive workflow: defining targets, configuring tools, and executing attacks.
target
Manages targets, which store all relevant information like URLs, IPs, and gathered data.
target add <name> # Create a new, empty target.
target update <name> url <url> # Set the URL (parsing IP/domain).
target gather <name> all # Actively gather DNS, WHOIS, HTTP info.
target load <name> # Load target into the current session.
target unload # Unload active target.
target export <name> # Generate commands to recreate the target.
tool
Configures external command-line tools. You define how a tool is called, and pwnity assembles the command with dynamic placeholders.
tool add <name> # Create a new tool (e.g., 'nmap').
tool update <name> command <cmd> # Add a subcommand.
tool update <name> <cmd> param <p> # Add a parameter with placeholders.
tool load <name> # Load tool into the current session.
tool show <name> # Display the tool's configuration.
wordlist
Manages references to wordlist files used for fuzzing, brute-forcing, etc.
wordlist add <name> # Create a new wordlist reference.
wordlist update <name> path <path> # Set the path to the wordlist file.
wordlist load <name> # Load wordlist into the current session.
wordlist list # List all available wordlists.
pwn (alias: run)
Builds and executes the command for the currently loaded tool, resolving all placeholders.
pwn <command> # Show a preview of the assembled command.
pwn <command> now # Execute in the foreground.
pwn <command> bg # Execute in the background (job).
pwn <command> -- -v # Add temporary parameters.
Session & State
Commands for managing your workspace and tracking activity.
session
Manages sessions—workspaces that remember your loaded target, tool, wordlist, and report.
session new <name> # Create a new session.
session switch <name> # Switch to an existing session.
session list # List all sessions.
session show # Show what is currently loaded.
preset
Manages presets, which are saved sessions (target, tool, wordlist, report, proxy) for quick and repeatable scans.
preset save <name> # Save current session as a preset.
preset load <name> # Load a preset into a new session.
preset list # List available presets.
overview
Displays a comprehensive dashboard of the current session.
overview # Show detailed dashboard.
overview --short # Show compact summary.
jobs
Brings background processes under control.
jobs list # List running/finished jobs.
jobs show <id> # Show output of a job.
jobs kill <id> # Terminate a running job.
heartbeat
Monitors a target's "vital signs" (latency, status) over time.
heartbeat start # Start monitoring loaded target.
heartbeat show <name> # Show live dashboard.
heartbeat stop [name] # Stop monitoring.
logbook
Manages the immutable logs of previous command executions.
logbook list -n 10 # Show last 10 execution logs.
logbook show <id> # Display full output for an entry.
logbook filter target <name> # Filter logs by target.
Data Management
Commands for handling data collected during your operations.
report
Manages reports, the central containers for all collected data (findings, notes, loot).
report add <name> # Create a new report.
report load <name> # Load report to start collecting data.
report render <name> # Save human-readable summary to file.
report export <name> # Export as recreation commands.
identify
Analyzes a string to guess its hash type or format.
identify <hash_string> # Identify raw hash string.
identify "$loot.0.value" # Identify a stored loot value.
note
Manages timestamped notes saved to the loaded report.
note add <text...> # Add a new note.
note list # List all notes.
note delete <id> # Delete a note.
loot
Manages found treasures (credentials, keys, flags).
loot add credential <user:pass> # Add a loot item.
loot list # List collected loot.
loot delete <id> # Delete a loot item.
parser
Manages regex-based parsers to extract findings from command output.
parser list # List available parsers.
parser apply <name> <log_id> # Parse a log entry and save findings.
parser show <name> # Show rules for a parser.
revshell
Generates reverse shell one-liners using profile settings.
revshell php # Generate PHP payload.
revshell python3 <ip> <port> # Generate Python payload with args.
placeholders
Inspects available placeholders and their current resolved values.
placeholders all # Show all available placeholders.
placeholders target # Show target-specific placeholders.
profile
Manages global key-value settings (e.g., API keys, default interfaces).
profile update user_agent <ua> # Set global User-Agent.
profile show # Show all profile settings.
library
Manages a library of useful links and resources (Cheatsheets, Lists).
library add <name> # Create a new entry.
library open <name> # Open URL in browser.
library list # List all entries.
Configuration & Utilities
System-level commands and helpers.
config
Manages application configuration (colors, paths, defaults).
config list # Display full config.
config set <KEY> <VALUE> # Set a config value.
print
Resolves placeholders and applies functions without executing shell commands.
print $target.ip # Print resolved target IP.
print b64encode(test) # Encode string to Base64.
proxy
Manages proxy settings for the current session.
proxy on # Enable proxy.
proxy set host <ip> # Set proxy host.
proxy reset host # Reset to global default.
alias
Create shortcuts for frequently used commands.
alias create <name> <command> # Create a new alias.
run_script
Executes a pwnity script file (.pwn).
run_script <path/to/script.pwn> # Run a script.