# kgretzky/pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

Repository: https://github.com/kgretzky/pwndrop
Canonical: https://ross.abutalabs.com/products/pwndrop
Homepage: https://breakdev.org/pwndrop
Language: JavaScript
License: GPL-3.0
License Family: copyleft
Topics: file-manager, self-hosted, file-sharing, http-server, webdav-server, redteam, payloads
Last push: 2023-02-25T05:08:15+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2470, "days_push": 1285, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2279, forks 298 (observed 2026-08-28T04:06:33.707162+00:00)

## What it is
pwndrop is a self-deployable file hosting service aimed at red teamers, letting users upload and share payloads over HTTP, HTTPS, and WebDAV from their own VPS. It provides a drag-and-drop admin panel with custom download URLs, facade files, MIME spoofing, and automatic HTTPS certificate management.

## Use cases
- host red team payloads on my own VPS
- quickly share files over HTTP and WebDAV without setting up nginx
- serve a decoy file instead of the real payload
- spoof file extensions in download links
- self-host a file sharing service with a web UI
- set up a web server with automatic HTTPS certificates

## When to choose
- you need to quickly host payloads or files on a VPS with a drag-and-drop admin panel
- you want red team features like facade files, MIME spoofing, and extension redirects
- you want a one-liner install with automatic HTTPS and DNS setup

## When to avoid
- you need a general-purpose production file hosting platform for many users
- you require fine-grained access control or multi-tenant file management
- you need an actively developed project with frequent updates

## Facets
- artifact type: service
- maturity: maintenance
- function: http-server, file-upload, webhook
- domain: security, self-hosted, files, penetration-testing
- platform: self-hosted
- tags: red-team, payload-hosting, webdav, file-sharing, penetration-testing, spoofing, linux, web-server, docker

## Member repositories
- kgretzky/pwndrop (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:33.707162+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:41:23.614414+00:00, confidence not recorded.
  - readme: https://github.com/kgretzky/pwndrop (fetched 2026-08-28T04:06:33.707162+00:00, sha f362f394b2bc)
  - homepage: https://breakdev.org/pwndrop (fetched 2026-08-29T10:21:58.748175+00:00, sha c1ac48f8bf8d)
- Data as of 2026-08-30T08:39:29.467469+00:00.