https://github.com/coinbase/pwnbot
You call PwnBot in Slack on someone else's unlocked computer
https://github.com/coinbase/pwnbot
Last synced: 8 months ago
JSON representation
You call PwnBot in Slack on someone else's unlocked computer
- Host: GitHub
- URL: https://github.com/coinbase/pwnbot
- Owner: coinbase
- License: apache-2.0
- Created: 2017-11-28T08:10:17.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2023-02-28T08:48:52.000Z (about 3 years ago)
- Last Synced: 2025-04-10T12:03:49.908Z (about 1 year ago)
- Language: JavaScript
- Homepage:
- Size: 2.93 MB
- Stars: 91
- Watchers: 30
- Forks: 8
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
README
# PwnBot
PwnBot is a fun game to emphasize the importance of locking your computer. An unlocked computer can be used to access accounts, retrieve passwords and install malicious software to compromise entire organizations.
> It doesn't matter how strong your lock is if you leave the front door open
PwnBot rewards a point to a person who calls it on someone else's **unlocked computer**, while taking away points from the person who left their computer unlocked. The score board is visible to everyone, not getting got is the incentive. This also removes the stigma of locking someone else's computer, so any unlocked computer will not stay that way for long.
*This Slack Application is provided for free with no uptime or SLA guarantees. Enjoy*
### Commands
You call PwnBot in Slack on someone else's **unlocked computer** with `/pwn @`, this will give you a point. The aim is to get points while not getting got.
Check the scoreboard with `/pwn` which lists who has be PWNed the most and who has the most PWNS.
## Deploy your own
PwnBot runs as a Lambda function backed by DynamoDB, called via API gateway. This is defined as a [GeoEngineer](https://github.com/coinbase/geoengineer) project in `resources/pwnbot.rb`. To create these resources you will need to use AWS SAM.
### Discussions and Links
1. Coinbase Director of Security describing PwnBot on [Software Engineering Daily](https://softwareengineeringdaily.com/2017/07/14/coinbase-security-with-philip-martin/)