# Pwndrop

Pwndrop is a lightweight self-hosted file-hosting service for red teamers and self-hosters to share red team payloads or private files over HTTP and WebDAV, with drag-and-drop uploads, download toggles, custom download. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/719/pwndrop

## Description

Pwndrop is a lightweight self-hosted file-hosting service for red teamers and self-hosters to share red team payloads or private files over HTTP and WebDAV, with drag-and-drop uploads, download toggles, custom download URLs, facade files, and automatic redirects.

## Platform availability

Available on 2 of 9 platforms: Unraid, ZimaOS.

## Health score

25/100 (Low), based on 4 of 5 factors.
- Maintained: 0 (last commit 2214 days ago)
- Popular: 67 (2,277 GitHub stars)
- Easy to install: 45 (2 install platforms, install notes, Docker image)
- Security check: 0 (8 serious findings, 10 minor)

## Security check

8 serious findings: Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability; Uses golang.org/x/crypto v0.0.0-20200117160349-530e935923ad, which has a known critical vulnerability.
Automated checks on commit 385ba70, 22 Oct 2026. Not an audit.

## Links

- GitHub: https://github.com/kgretzky/pwndrop
- Docker Hub: https://hub.docker.com/r/linuxserver/pwndrop
- Unraid: https://ca.unraid.net/apps/pwndrop-1304hz10saiohd?q=pwndrop
- Official website: https://breakdev.org/pwndrop

## Common questions

### Can Pwndrop share files over HTTP and WebDAV?

Yes, Pwndrop allows files and payloads to be uploaded and shared over HTTP and WebDAV.

### Does Pwndrop include a web admin panel?

A fork describes Pwndrop as having a small web admin panel and HTTP/WebDAV delivery.

### Can Pwndrop be deployed as a single-port Docker Compose stack?

The fork provides a single-port Docker Compose deployment.

### Does Pwndrop include red team stealth features?

It has pentest-friendly hidden menu and facade files.

### What authorization limit applies to files hosted on Pwndrop?

Use it only for files and infrastructure you are authorized to host and test.

---
Source: Our Local Host (https://ourlocalhost.com/app/719/pwndrop), the self-hosted and open-source app directory.