hak5/bashbunny-payloads resource

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2947 stars · 1475 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The official community payload repository for the Hak5 Bash Bunny USB attack platform, containing payloads written in DuckyScript and Bash. Payloads perform hotplug attacks such as keystroke injection, HID emulation, and automated pentesting tasks when plugged into a target machine.

Use cases

• inject keystrokes into a target computer via USB
• run automated pentest payloads from a Bash Bunny
• find ready-made badusb payloads for the Bash Bunny Mark II
• learn DuckyScript by studying community payload examples
• contribute or share Bash Bunny payloads with the community
• simulate USB HID attacks in authorized security assessments

When to choose

• you own a Hak5 Bash Bunny and need payloads or extensions for it
• you are a red teamer or pentester doing authorized physical-access USB attack simulations
• you want reference examples for writing DuckyScript payloads

When to avoid

• you need a general-purpose USB Rubber Ducky payload repo instead
• you want a software-only badusb tool without the Bash Bunny hardware
• you need guaranteed or supported payload functionality - Hak5 explicitly disclaims it

Facets

dataset · maturity active

penetration-testing security developer-tools security penetration-testing hardware embedded cli bash-bunny duckyscript badusb keystroke-injection hid-attacks payload-repository hak5 usb-attack linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hak5/bashbunny-payloads")