Menu

      Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.

      PAYLOAD HUB
      Discover creative payloads from the Hak5 community with filtering by device and category.

      PAYLOAD STUDIO
      Unleash your hacking creativity with this full-featured web-based Payload development environment.

      PAYLOAD AWARDS
      Get your payload in front of thousands and enter to win. Nearly $10,000 in annual Hak5 prizes!

      ADVANCED DUCKYSCRIPT COURSE
      Learn directly from the creators! Unlock your creative potential with this comprehensive online course.

      [PAYLOAD] SERIES
      Join Hak5 hosts and collaborators as we dive into the techniques and code that make great payloads!

      Community developed payloads for Hak5 gear are featured and awarded at PayloadHub — a growing library of currated content.

      Unleash your hacking creativity with the online payload editor: PayloadStudio

      Link to your collections, sales and even external links

      Add up to five columns

      Canary Duck

      Canary Duck

      by Jessie Crimson Hart January 05, 2022

      General USB Rubber Ducky

      Opens hidden powershell and connects to canary webserver using Invoke-WebRequest alerting you to spies and snoops.
      Gather Network Info

      Gather Network Info

      by JonnyBanana January 05, 2022

      Exfiltration USB Rubber Ducky

      gathernetworkInfo a info stealer script by JonnyBanana

      Ducky WiFi Grabber

      Ducky WiFi Grabber

      by Zero_Sploit January 05, 2022

      Exfiltration USB Rubber Ducky

      Steals wifi passwords and sends them to your outlook email. Some editing on your part is needed such as outlook email & password
      DuckyHelper

      DuckyHelper

      by 0i41E January 05, 2022

      Execution USB Rubber Ducky

      UAC bypass for privilege escalation (Method FodHelper) AV will notify, but payload will still be executed Payload configured in line 19 & 21 (cmd.exe) : ...

      DUCKY_REAPER

      DUCKY_REAPER

      by JonnyBanana January 05, 2022

      Execution USB Rubber Ducky

      The script is a One-Liner and call an html page with a css webkit filter attack inside, this webpage crash the system webpage with the exploit here: https://...
      datacopier

      datacopier

      by Dante Sparda January 05, 2022

      Credentials USB Rubber Ducky

      this took a lot of digging and research. please use responsibly. I wrote this on a wim but of course you can filter whatever you want to the loot folder.

      Simple Windows Password Grabber

      Simple Windows Password Grabber

      by makozort January 05, 2022

      Credentials USB Rubber Ducky

      Target: Windows 10 (with admin access), might work with Windows 7 idk
      $MFT-Duck-Crasher

      $MFT-Duck-Crasher

      by JonnyBanana September 28, 2021

      Execution USB Rubber Ducky

      A Simple Script for Rubber Ducky which Exploits Windows $MFT Vulnerability.

      Leaderboard

      2024 Payload Heroes
      1. 🥇   Cribbit
      2. 🥈   InfoSecREDD
      3. 🥉   TW-D
      2023 Payload Heroes
      1. 🥇   Aleff
      2. 🥈   0i41E
      3. 🥉   Spywill
      2022 Payload Heroes
      1. 🥇   I AM JAKOBY
      2. 🥈   0iphor13
      3. 🥉   atomiczsec

      Get Rewarded

      Get your payload in front of thousands. Enter to win over $2,000 in prizes in the Hak5 Payload Awards!

      Awarded Payloads

      2025

       

      2024

       

      2023

       

      2022

      Contribute

      Submit entries to a payload repository by pull request. New to github? See this Hak5 tutorial video.

      Collaborate

      Get inspired, showcase your work and receive helpful feedback on your payloads in the Hak5 Community!

      Caution

      Third-party payloads executing as root may cause damage and come AS-IS without warranty or guarantees.

      Disclaimer

      Payloads are for education and auditing where permitted subject to local and international laws. Users are solely responsible for compliance. Hak5 claims no responsibility for unauthorized or unlawful use.

      Stats

      596 featured payloads in this library. Hundreds more at GitHub.com/Hak5.

      DEVICES

      CATEGORIES


      Previous 1 … 12 13 14