# PCWT | A Web Application That Makes It Easy To Run Your Pentest And Bug Bounty Projects

**URL:** <https://onehack.st/t/pcwt-a-web-application-that-makes-it-easy-to-run-your-pentest-and-bug-bounty-projects/163012>\
**Category:** Tools & Scripts\
**Tags:** programming, hacking, windows\
**Created:** [November 18, 2020, 1:51pm UTC](https://onehack.st/t/pcwt-a-web-application-that-makes-it-easy-to-run-your-pentest-and-bug-bounty-projects/163012 "2020-11-18T13:51:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [November 18, 2020, 1:51pm UTC](https://onehack.st/t/pcwt-a-web-application-that-makes-it-easy-to-run-your-pentest-and-bug-bounty-projects/163012/1 "2020-11-18T13:51:18Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/1/2/12c89f843a33e99d692027e9d3bf3be3ee0466a5.png)

A web application that makes it easy to run your pentest and bug bounty projects.

**Description**

The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search.

### Main page

[![Main page](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/mainpage.png)](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/mainpage.png)

### Project settings

[![Settings](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/settings.png)](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/settings.png)

### Domains dashboard

[![Domains](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/domains.png)](https://raw.githubusercontent.com/ascr0b/PCWT/master/images/domains.png)

### Port scan

You can scan ports using nmap or masscan. The nmap is started with the following arguments:

```auto
nmap --top-ports 10000 -sV -Pn --min-rate 300 --max-retries 2 [ip]

```

The masscan is started with the following arguments:

```auto
masscan -p 1-65535 --rate 2000

```

### Subdomain search

[Amass](https://github.com/OWASP/Amass) and [findomain](https://github.com/Edu4rdSHL/findomain) are used to find subdomains.

### Features

- Leave notes to host, port or domain.
- Mark host or domain with tags.
- Search by any field related with host, port or domain (tags and notes are included). Regexp is available.
- Different types of sorting ara available on almost all dashboards.
- Run port scan for all hosts, hosts without port scan or custom list.
- Create tasks for subdomains search (every 2 hours, every 5 hours, every day or every week). You can also disable and enable them on demand using `Subdomain tasks` dashboard.
- Different types of export are available.
- Notifications about the start and end of the scan, as well as about new found domains can be sent to Telegram. Update the `config.py` with your chat id and token.

## Install from sources

NOTE 1: Change the paths for amass, findomain, nmap and masscan in `config.py` before running commands. NOTE 2: The app must be started as root if you want masscan to work.

```auto
apt install python3 python-venv python3-pip
git clone https://github.com/ascr0b/PCWT
cd PCWT

python3 -m venv env
source env/bin/activate
pip3 install -r requirements.txt

flask init-db
flask crontab add

export FLASK_APP=app
flask run

```

The app is available at [http://127.0.0.1:5000](http://127.0.0.1:5000/)

## GitHub:

> **[GitHub - ascr0b/PCWT](https://github.com/ascr0b/PCWT)**
>
> Contribute to ascr0b/PCWT development by creating an account on GitHub.