Summary: Define command templates that are dynamically filled with data from your current session.

The Placeholder System

Placeholders are the core of pwnity's flexibility. They allow you to define command templates that are dynamically filled with data from your current session at runtime.

Syntax

$entity.path.to.value

Entities

The available entities are:

• target: The currently loaded target.
• tool: The currently loaded tool.
• wordlist: The currently loaded wordlist.
• profile: Global key-value pairs you define.
• proxy: The current effective proxy configuration.

Path Navigation

You can access nested data using dot notation.

Example: If a target has been updated with target update my-server url "https://api.example.com/v1?user=test", you can access:

• $target.ip → (the resolved IP of api.example.com)
• $target.port → 443
• $target.query_values.user.0 → test

Inspecting Placeholders

Use the placeholders command to see all available placeholders and their current resolved values for the loaded entities.

placeholders target
placeholders all