Overview
The Google Calendar integration lets you push Pwnbook task due dates and engagement milestones to a Google Calendar of your choice. Keep your pentest schedule visible without switching between tools.
Google Calendar sync is configured per user, not per organization. Each team member connects their own Google account independently.
Prerequisites
- A Google account with Google Calendar
- A Pwnbook account
Setup
Connect your Google account
- Go to User Settings → Integrations → Google Calendar.
- Click Connect Google Calendar.
- A Google OAuth window opens. Sign in with the Google account you want to use.
- Review the requested permissions and click Allow.
Pwnbook requests the following Google Calendar scope:| Scope | Reason |
|---|
https://www.googleapis.com/auth/calendar | Read and write calendar events to sync tasks |
Select a calendar
After connecting, choose which Google Calendar to sync to:
- In the Calendar settings, open the Target Calendar dropdown.
- Select a calendar from your Google account (personal, shared, or a team calendar).
- Click Save.
Create a dedicated calendar (e.g., “Pwnbook”) to keep pentest events separate from your personal calendar.
What gets synced
| Item | Synced as | Notes |
|---|
| Task due dates | Calendar event on the due date | Title includes task name and engagement |
| Task assignments (to you) | Calendar event | Only your assigned tasks are synced |
Managing synced events
Synced events appear in Google Calendar with a Pwnbook label. You can view them, but edits made directly in Google Calendar are not synced back to Pwnbook. Make changes in Pwnbook — they’ll propagate to the calendar.
Disconnecting
To disconnect your Google Calendar:
- Go to User Settings → Integrations → Google Calendar.
- Click Disconnect.
Pwnbook will stop syncing events. Existing calendar events created by Pwnbook remain in Google Calendar; delete them manually if needed.
To fully revoke Pwnbook’s access to your Google account, visit myaccount.google.com/permissions and remove the Pwnbook app.
Self-hosted configuration
If you’re running a self-hosted Pwnbook instance, a server admin needs to configure the Google OAuth app before users can connect their calendars.
Required environment variables:
| Variable | Description |
|---|
GOOGLE_CLIENT_ID | OAuth 2.0 client ID from Google Cloud Console |
GOOGLE_CLIENT_SECRET | OAuth 2.0 client secret |
GOOGLE_REDIRECT_URI | Must be set to https://<your-domain>/auth/google/callback |
- Go to Google Cloud Console.
- Create a project (or use an existing one).
- Enable the Google Calendar API.
- Go to APIs & Services → Credentials.
- Click Create Credentials → OAuth 2.0 Client ID.
- Set the application type to Web application.
- Add your redirect URI:
https://<your-domain>/auth/google/callback.
- Copy the Client ID and Client Secret into your
.env.
