# hak5/bashbunny-payloads

The Official Bash Bunny Payload Repository

Repository: https://github.com/hak5/bashbunny-payloads
Canonical: https://ross.abutalabs.com/products/bashbunny-payloads
Homepage: https://bashbunny.com
Language: PowerShell
License Family: other
Topics: badusb, bashbunny, duckyscript, hak5, hak5-bashbunny, hid, keystroke-injection, security-tools, pentesting
Last push: 2026-06-13T21:51:33+00:00

## Health v2 (maintenance only)
Score: 62/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 87, release rhythm 8, longevity 100
- inputs: {"age_days": 3528, "days_push": 81, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2947, forks 1475 (observed 2026-08-28T04:07:31.787492+00:00)

## What it is
The official community payload repository for the Hak5 Bash Bunny USB attack platform, containing payloads written in DuckyScript and Bash. Payloads perform hotplug attacks such as keystroke injection, HID emulation, and automated pentesting tasks when plugged into a target machine.

## Use cases
- inject keystrokes into a target computer via USB
- run automated pentest payloads from a Bash Bunny
- find ready-made badusb payloads for the Bash Bunny Mark II
- learn DuckyScript by studying community payload examples
- contribute or share Bash Bunny payloads with the community
- simulate USB HID attacks in authorized security assessments

## When to choose
- you own a Hak5 Bash Bunny and need payloads or extensions for it
- you are a red teamer or pentester doing authorized physical-access USB attack simulations
- you want reference examples for writing DuckyScript payloads

## When to avoid
- you need a general-purpose USB Rubber Ducky payload repo instead
- you want a software-only badusb tool without the Bash Bunny hardware
- you need guaranteed or supported payload functionality - Hak5 explicitly disclaims it

## Facets
- artifact type: dataset
- maturity: active
- function: penetration-testing, security, developer-tools
- domain: security, penetration-testing, hardware
- platform: embedded, cli
- tags: bash-bunny, duckyscript, badusb, keystroke-injection, hid-attacks, payload-repository, hak5, usb-attack, linux

## Member repositories
- hak5/bashbunny-payloads (main) score 62

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:31.787492+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:32:46.548759+00:00, confidence not recorded.
  - readme: https://github.com/hak5/bashbunny-payloads (fetched 2026-08-28T04:07:31.787492+00:00, sha 2168aad02382)
  - homepage: https://bashbunny.com (fetched 2026-08-29T09:48:05.050537+00:00, sha e9acebf86647)
  - site_page: https://docs.hak5.org (fetched 2026-08-29T09:48:05.054011+00:00, sha b379fd8404ba)
  - site_page: https://hak5.org/pages/about (fetched 2026-08-29T09:48:05.055914+00:00, sha 6b241270409d)
- Data as of 2026-08-30T08:39:29.467469+00:00.