Your Cart is Empty
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning podcasts, leading pentest gear, and inclusive community – where all hackers belong.
Community developed payloads for Hak5 gear are featured and awarded at PayloadHub — a growing library of currated content.
Unleash your hacking creativity with the online payload editor: PayloadStudio
Link to your collections, sales and even external links
Add up to five columns
Community developed payloads for Hak5 gear are featured and awarded at PayloadHub — a growing library of currated content.
Unleash your hacking creativity with the online payload editor: PayloadStudio
Link to your collections, sales and even external links
Add up to five columns
Make your Bash Bunny into the perfect data thief. This payload is ideal for demonstrating the need to lock workstations: using it, you can stroll through a facility and steal critical information from PC after PC. The attack is highly configurable with the following options: • Copies are timed to be as fast or as long as you want. You’ll know exactly how long you have per workstation, and also know you can remove the Bash Bunny safely once it the time expires • The copy may be configured to stop when a secret BLE beacon is sent – the Bash Bunny will shut down for immediate removal. • Concerned that someone might see the attack? Configure the payload to flash windows and suddenly lock before shutting down the Bash Bunny, which gives the payload time to clean up its tracks while you make appropriate excuses. • Want to trigger the payload from afar? Make the attack a “button job” – the Bash Bunny will take advantage of Cool Cucumber CPU usage while waiting for the secret BLE beacon. The payload may be used with or without a SD card and places loot in a folder with the computer’s name. Additionally it targets the most likely high-value targets on a workstation, and only those that have been updated in past 30 days – however feel free to tailor parameters to your unique pentest situation.
Exfiltration is an involuntary backup. It's a technique for obtaining data from a network. Once obtained, the data may be removed using a number of methods. These may include traversing the network to a command and control server, such as Cloud C². The content is typically encrypted or obfuscated. In the case of physical access, a bring-your-own-network element may be included to evade detection. See all exfiltration payloads.
This payload is for the Bash Bunny. Simultaneously mimic multiple trusted devices to trick targets into divulging sensitive information without triggering defenses. The Bash Bunny is truly the world's most advanced USB attack platform.
Submit your own payload, or browse more featured Bash Bunny Payloads.
Get RewardedGet your payload in front of thousands. Enter to win over $2,000 in prizes in the Hak5 Payload Awards!
Awarded Payloads
ContributeSubmit entries to a payload repository by pull request. New to github? See this Hak5 tutorial video.
CollaborateGet inspired, showcase your work and receive helpful feedback on your payloads in the Hak5 Community!
CautionThird-party payloads executing as root may cause damage and come AS-IS without warranty or guarantees.
DisclaimerPayloads are for education and auditing where permitted subject to local and international laws. Users are solely responsible for compliance. Hak5 claims no responsibility for unauthorized or unlawful use.
Stats442 featured payloads in this library. Hundreds more at GitHub.com/Hak5.
Leaderboard