Menu

      Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.

      PAYLOAD HUB
      Discover creative payloads from the Hak5 community with filtering by device and category.

      PAYLOAD STUDIO
      Unleash your hacking creativity with this full-featured web-based Payload development environment.

      PAYLOAD AWARDS
      Get your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!

      ADVANCED DUCKYSCRIPT COURSE
      Learn directly from the creators! Unlock your creative potential with this comprehensive online course.

      [PAYLOAD] SERIES
      Join Hak5 hosts and collaborators as we dive into the techniques and code that make great payloads!

      Community developed payloads for Hak5 gear are featured and awarded at PayloadHub — a growing library of currated content.

      Unleash your hacking creativity with the online payload editor: PayloadStudio

      Link to your collections, sales and even external links

      Add up to five columns

      Randomizing User-Agent

      Randomizing User-Agent

      🏆   by Aleff February 23, 2025

      Execution USB Rubber Ducky

      This DuckyScript payload automates the process of modifying the Google Chrome user-agent dynamically by integrating a random user-agent
      Stunnel

      Stunnel

      🏆   by p4p1 February 21, 2025

      LAN Turtle Remote Access

      pass a unsecure protocol through a SSL connection

      Hash Slinging Stasher

      Hash Slinging Stasher

      🏆   by theSW4n February 04, 2025

      Bash Bunny Exfiltration

      This payload copies files to Bash Bunny udisk from the target OS matching given extensions and file size while checking file checksum
      Screenshare Over LAN

      Screenshare Over LAN

      🏆   by beigeworm February 04, 2025

      Recon USB Rubber Ducky

      This payload starts up a HTTP server and streams the local desktop to a browser window for other devices on the network.

      Flood Gateway

      Flood Gateway

      🏆   by InfoSecREDD January 23, 2025

      Execution Shark Jack

      This payload detects the Gateway IP then proceeds to send SYN/ACK/RST/UDP to the Gateway
      Pebbles

      Pebbles

      🏆   by Cribbit January 07, 2025

      General Key Croc

      This Keycroc payload creates the game of pebbles base off of the game NIM, with the user battling the croc.

      FileHunter

      FileHunter

      🏆   by 0i41E January 03, 2025

      Exfiltration USB Rubber Ducky

      Crawls all drives of the target system for a specific file or file type, to then compress and exfiltrate them to the Ducky.
      USB Poison

      USB Poison

      🏆   by beigeworm January 03, 2025

      General USB Rubber Ducky

      This payload executes a script that waits for new USB flash storage devices to be connected. When a new device connects, this script will copy a desired file...

      Leaderboard

      2024 Payload Heroes
      1. 🥇   Cribbit
      2. 🥈   InfoSecREDD
      3. 🥉   TW-D
      2023 Payload Heroes
      1. 🥇   Aleff
      2. 🥈   0i41E
      3. 🥉   Spywill
      2022 Payload Heroes
      1. 🥇   I AM JAKOBY
      2. 🥈   0iphor13
      3. 🥉   atomiczsec

      Get Rewarded

      Get your payload in front of thousands. Enter to win over $2,000 in prizes in the Hak5 Payload Awards!

      Awarded Payloads

      2025
      Randomizing User-Agent
      Stunnel
      Hash Slinging Stasher
      Screenshare Over LAN
      Flood Gateway
      Pebbles
      FileHunter
      USB Poison

       

      2024

       

      2023

       

      2022

      Contribute

      Submit entries to a payload repository by pull request. New to github? See this Hak5 tutorial video.

      Collaborate

      Get inspired, showcase your work and receive helpful feedback on your payloads in the Hak5 Community!

      Caution

      Third-party payloads executing as root may cause damage and come AS-IS without warranty or guarantees.

      Disclaimer

      Payloads are for education and auditing where permitted subject to local and international laws. Users are solely responsible for compliance. Hak5 claims no responsibility for unauthorized or unlawful use.

      Stats

      595 featured payloads in this library. Hundreds more at GitHub.com/Hak5.

      DEVICES

      CATEGORIES