🏆 by OSINTI4L January 05, 2026
Mobile-Android USB Rubber Ducky
PlunderPIN is a mobile PIN phishing payload that replaces a user's Google Chrome browser homepage with a malicious imitation homepage that creates prompts to...
🏆 by TW-D January 05, 2026
Credentials Packet Squirrel
This payload uses inotifywait and DYNAMICPROXY to monitor the HTTP POST data streams generated by a client and extract sensitive information using awk.
🏆 by r0yfire January 02, 2026
An AI-powered cyberpunk text adventure generator inspired by Neal Stephenson's Snow Crash. Uses the Anthropic API (Claude Sonnet) to generate unique Metavers...
🏆 by RocketGod January 02, 2026
Memory game with lights and sounds!
🏆 by justnobody288 October 26, 2025
Bash Bunny Prank
This payload uses the Bash bunny to select a random Hak5 website page and opens it every 5 minutes.
🏆 by TW-D October 26, 2025
General Shark Jack
This payload allows bypassing MAC filtering, which is a security method used to control access to a network based on the MAC address of devices. This payload...
🏆 by TW-D September 17, 2025
Exfiltration USB Rubber Ducky
This payload does covert timing-channel data exfiltration by running a local command, encoding each character’s ASCII value as a delay between network probes...
🏆 by PacketHouse August 16, 2025
General USB Rubber Ducky
This payload generates random hostnames, IPs, and MACs into a text file.
🏆 by OSINTI4L June 30, 2025
Mobile-Android USB Rubber Ducky
Brisket_Breacher is DuckyScript payload that targets the Android mobile device Google Chrome browser utilizing the Browser Exploitation Framework (BeEF). It ...
🏆 by OSINTI4L May 30, 2025
Mobile-Android USB Rubber Ducky
Droidex exfiltrates the top file stored in the Downloads directory of target mobile device to a self-hosted python webserver over LAN.
🏆 by OSINTI4L May 14, 2025
Exfiltration USB Rubber Ducky
edit2exfil is a persistent file exfiltration payload that embeds itself as a cronjob on Linux systems via bash script, running silently in the background all...
🏆 by Cribbit May 11, 2025
Exfiltration USB Rubber Ducky
This payload exfiltrates files by creating a 1 pixel sized form in the top left of the screen and changes the background to black or white to represent the b...
🏆 by Cribbit April 01, 2025
Execution Key Croc
This payload utilizes 2 KeyCrocs + netcat to send keystrokes from one croc to another.
🏆 by jakobfriedl March 16, 2025
Exfiltration USB Rubber Ducky
This collection of payloads dumps Windows Credentials using mimikatz and features multiple exfiltration methods.
🏆 by Aleff February 23, 2025
Execution USB Rubber Ducky
This DuckyScript payload automates the process of modifying the Google Chrome user-agent dynamically by integrating a random user-agent
🏆 by p4p1 February 21, 2025
LAN Turtle Remote Access
pass a unsecure protocol through a SSL connection
🏆 by theSW4n February 04, 2025
Bash Bunny Exfiltration
This payload copies files to Bash Bunny udisk from the target OS matching given extensions and file size while checking file checksum
🏆 by beigeworm February 04, 2025
Recon USB Rubber Ducky
This payload starts up a HTTP server and streams the local desktop to a browser window for other devices on the network.
Get Rewarded
Contribute
Collaborate
Caution
Disclaimer
Stats
Leaderboard