Introduction

Pwnbox is a customized, online Parrot Security Linux distribution - you can launch it from Hack The Box site and play with it in a browser (similar to the Kasm Workspaces streaming). It has immediate access to the HTB Challenges network, without additional VPN configuration.
More details: What is Pwnbox? How does it work?
Setup
I strongly recommend forking the repository then modify scripts to your liking. Disclaimer.
Collect and run init-pwnbox.sh script from my GitHub.
curl https://raw.githubusercontent.com/CyberEthicalMe/configs/master/htb-pwnbox/init-pwnbox.sh | sh
Explanation
Hack The Box is running user_init script each time Pwnbox is started. In the head of this file you can read.
#!/bin/bash
So, I've put some effort creating the script that automates setting up the persistence on the Pwnbox by wgetting some resources and modifying the initial user_init script.
Details: init-pwnbox.sh
- Change current working directory to
$HOME/my_data.
- Get preconfigured
user_init file from the repository. Backups the original file.
- Get Powerline font for
tmux theme (yes, I forced it a bit and I'm loving tmux now).
- Prepare
home directory to preload in user_init. Things like .*.conf files.
- Create RSA keypair for persistence over SSH. It makes easier to come back to the server during the hacking challenges.
- Get terminal settings export script. This just saves the state of the default terminal (
mate-terminal).
- Clones tools repositories. Right now, only
ffuf, that is not available out-of-the box (pun intended).
- Returns to the previous working directory.
Details: user_init
- Copy files from
~/my_data/home to ~.
- Add Powerline font for
tmux. Refresh font cache.
- Load
mate-terminal profiles. May require manual switching profiles.
Known Improvement Points
- Manual refresh of
tmux config (Ctrl+A, Shift+I) when tmux launched for the first time.
- Manual import of
mate-terminal profiles. For some these are not imported on initial user_init - use the import-mate-terminal.sh to import these on the first launch of terminal.