kernelstub / Pwnbox

PWNBOX 
 A ready-to-go NixOS +
 home-manager box for
 hacking, reverse engineering, Active Directory and networking .
 It's reproducible, portable and built for privacy .
---
## Table of contents
- Documentation
- Categories
- Apps
- Themes & customization
- Desktop
- Keybinds
- Privacy
- Install
- ISOs
- IDA Free / Pro
- Community
- Author
- License
---
## Documentation
The full manual lives in `docs/`:
| Document | What it covers |
| --- | --- |
| Getting started | Install, first boot, updates, host config |
| ISOs | Live/installer ISOs, live credentials, booting |
| Desktop | Hyprland, GNOME, Quickshell and the bar |
| Keybinds | Every keyboard shortcut |
| Themes | Wallpaper themes, custom themes, the `ALT + S` menu |
| Fonts | System/application fonts and sizes |
| Apps | Per-app theming and live updates |
| Browser | Zen, site themes and the pwnbox styles extension |
| Packages | Tool categories and optional app sets |
| Privacy | Hardening and zero-trace defaults |
| Architecture | Repo layout and how a theme switch works |
| Troubleshooting | Common problems and fixes |
| Development | Add themes, packages and bar styles |
---
## Categories
26 pentest categories, all on by default. Turn any of them off with
`pwnbox.packages.toolset. .enable = false;`.
| Group | Category | Focus |
| ----------------------- | --------------------- | ----------------------------------------- |
| **Recon & Web** | `reconnaissance` | Host/port discovery, DNS, OSINT |
| | `web` | Web proxies, injection, content discovery |
| **Exploit & AD** | `exploitation` | Exploit frameworks and databases |
| | `active-directory` | Windows / AD attack & enumeration |
| **Network & Radio** | `network` | Capture, MITM, proxying, pivoting |
| | `wireless` | Wi-Fi auditing |
| | `bluetooth` | Bluetooth / BLE |
| | `rf-sdr` | Radio / software-defined radio |
| **Hardware & Firmware** | `hardware` | Embedded, flashing, logic |
| | `firmware` | Firmware extraction & analysis |
| | `smartcards` | NFC, RFID, smart cards |
| **Reversing & Pwn** | `reverse-engineering` | Disassembly, decompilation, malware |
| | `binary-exploitation` | Pwn, debugging, ROP |
| | `fuzzing` | Fuzzers and mutation tooling |
| **Forensics & Defense** | `forensics` | Disk & memory forensics |
| | `blue-team` | Detection, monitoring, hardening |
| | `code-analysis` | SAST, secrets, dependencies |
| **Cloud & Infra** | `cloud` | AWS, Azure, GCP |
| | `containers` | Docker, Podman |
| | `kubernetes` | Kubernetes tooling |
| **Cracking & Crypto** | `password-cracking` | Hash & login cracking |
| | `cryptography` | Crypto and key tooling |
| | `wordlists` | Bundled wordlists |
| **Mobile & Comms** | `mobile` | Android / iOS |
| | `voip` | SIP |
| **Utilities** | `python` | OSINT CLI helpers |
## Apps
On top of the toolset, the box ships a full daily-driver app set:
| Area | Apps |
| ---------------------------- | ----------------------------------------------------------------------------------------------------