Menu

      Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.

      PAYLOAD HUB
      Discover creative payloads from the Hak5 community with filtering by device and category.

      PAYLOAD STUDIO
      Unleash your hacking creativity with this full-featured web-based Payload development environment.

      PAYLOAD AWARDS
      Get your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!

      ADVANCED DUCKYSCRIPT COURSE
      Learn directly from the creators! Unlock your creative potential with this comprehensive online course.

      [PAYLOAD] SERIES
      Join Hak5 hosts and collaborators as we dive into the techniques and code that make great payloads!

      Community developed payloads for Hak5 gear are featured and awarded at PayloadHub — a growing library of currated content.

      Unleash your hacking creativity with the online payload editor: PayloadStudio

      Link to your collections, sales and even external links

      Add up to five columns

      Windows netstat to Discord Exfiltration

      Windows netstat to Discord Exfiltration

      by Aleff January 08, 2023

      Exfiltration USB Rubber Ducky

      Opens PowerShell hidden, grabs netstat status, saves as a cleartext in a variable and exfiltrates info via Discord Webhook.
      ProtonVPN config file

      ProtonVPN config file

      by Aleff January 08, 2023

      Exfiltration USB Rubber Ducky

      This script will stole target ProtonVPN config file. Opens PowerShell hidden, grabs ProtonVPN config file, saves as a cleartext in a variable and exfiltrate...

      Priv-Paths

      Priv-Paths

      by atomiczsec December 16, 2022

      Exfiltration USB Rubber Ducky

      A payload to enumerate unqouted service paths for privilege escalation and send to a discord webhook.
      Priv-Paths

      Priv-Paths

      by atomiczsec December 16, 2022

      Exfiltration OMG

      A payload to enumerate unquoted service paths for privilege escalation and send to a discord web-hook.

      Printer-Recon

      Printer-Recon

      by atomiczsec November 17, 2022

      Exfiltration OMG

      This payload is meant to exfiltrate printer information for further social engineering or driver explotation. Can also be used to find printer web interfaces...
      Printer-Recon

      Printer-Recon

      by atomiczsec November 17, 2022

      Bash Bunny Exfiltration

      This payload is meant to exfiltrate printer information for further social engineering or driver explotation. Can also be used to find printer web interfaces...

      Printer-Recon

      Printer-Recon

      🏆   by atomiczsec November 17, 2022

      Exfiltration USB Rubber Ducky

      This payload is meant to exfiltrate printer information for further social engineering or driver explotation. Can also be used to find printer web interfaces...
      Spotify-Spy

      Spotify-Spy

      by atomiczsec November 07, 2022

      Exfiltration OMG

      This payload is meant to exfiltrate spotify usernames on the device. Some people are too afraid to ask for their spotify or playlist so here is a sneaky way ...

      Spotify-Spy

      Spotify-Spy

      by atomiczsec November 07, 2022

      Bash Bunny Exfiltration

      This payload is meant to exfiltrate spotify usernames on the device. Some people are too afraid to ask for their spotify or playlist so here is a sneaky way ...
      Spotify-Spy

      Spotify-Spy

      by atomiczsec November 07, 2022

      Exfiltration USB Rubber Ducky

      This payload is meant to exfiltrate spotify usernames on the device. Some people are too afraid to ask for their spotify or playlist so here is a sneaky way ...

      Powershell-History

      Powershell-History

      by atomiczsec November 01, 2022

      Exfiltration OMG

      This payload will enumerate through the powershell directories, looking for the file that stores the history of the powershell console These files will be s...
      Powershell-History

      Powershell-History

      by atomiczsec November 01, 2022

      Bash Bunny Exfiltration

      This payload will enumerate through the powershell directories, looking for the file that stores the history of the powershell console These files will be s...

      Powershell-History

      Powershell-History

      by atomiczsec November 01, 2022

      Exfiltration USB Rubber Ducky

      This payload will enumerate through the powershell directories, looking for the file that stores the history of the powershell console These files will be s...
      Fast WiFi Exfil

      Fast WiFi Exfil

      by Scrut1ny October 17, 2022

      Exfiltration OMG

      Fast WiFi Exfil (Powershell - No RunMRU History)

      Pwn-Drive

      Pwn-Drive

      by atomiczsec October 11, 2022

      Exfiltration USB Rubber Ducky

      This payload will share the entire victims "C:" drive to the entire network for further exploitation.
      Pwn-Drive

      Pwn-Drive

      by atomiczsec October 11, 2022

      Exfiltration OMG

      This payload will share the entire victims "C:" drive to the entire network for further exploitation.

      Pwn-Drive

      Pwn-Drive

      by atomiczsec October 11, 2022

      Bash Bunny Exfiltration

      This payload will share the entire victims "C:" drive to the entire network for further exploitation.
      Copy-And-Waste

      Copy-And-Waste

      by atomiczsec October 09, 2022

      Exfiltration OMG

      A payload to exfiltrate clipboard contents

      Leaderboard

      2022 Payload Heroes
      1. 🥇   I AM JAKOBY
      2. 🥈   0iphor13
      3. 🥉   atomiczsec

      Get Rewarded

      Get your payload in front of thousands. Enter to win over $2,000 in prizes in the Hak5 Payload Awards!

      Awarded Payloads

      2023

       

      2022

      Contribute

      Submit entries to a payload repository by pull request. New to github? See this Hak5 tutorial video.

      Collaborate

      Get inspired, showcase your work and receive helpful feedback on your payloads in the Hak5 Community!

      Caution

      Third-party payloads executing as root may cause damage and come AS-IS without warranty or guarantees.

      Disclaimer

      Payloads are for education and auditing where permitted subject to local and international laws. Users are solely responsible for compliance. Hak5 claims no responsibility for unauthorized or unlawful use.

      Stats

      576 featured payloads in this library. Hundreds more at GitHub.com/Hak5.

      DEVICES

      CATEGORIES


      Previous 1 2 3 4 5 6 7 Next