Summary: Manage targets, the central objects for an engagement that hold all discovered information.

Managing Targets

A Target is the central object for an engagement. It holds all the technical information you discover about a specific asset (like an IP address or domain).

NOTE
Analytical findings like your personal notes and discovered loot (credentials, flags) are stored in a separate report object, not in the target itself.

The Power of the url Field

The most important command is target update <name> url <url>. When you provide a URL, pwnity automatically parses it and populates numerous fields for you:

  • ip: Resolves the hostname to an IP address.
  • hostname, port, protocol, uri: Basic URL components.
  • domain, tld, subdomains: Detailed domain information.
  • query_params, query_values: Parsed query string parameters.

This means you only need to set the URL, and dozens of useful placeholders become available instantly.

Active Information Gathering

Beyond parsing, you can actively gather information with the gather command.

target gather my-server dns     # Gets A, AAAA, CNAME, MX, NS, TXT records
target gather my-server whois   # Performs a WHOIS lookup on the main domain
target gather my-server http    # Retrieves HTTP headers and the SSL certificate
target gather my-server geo     # Retrieves Geo-IP information for the target's IP
target gather my-server all     # Does all of the above