mgeeky/PackMyPayload

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1209 stars · 171 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PackMyPayload is a Python CLI proof-of-concept tool that packages files or directories into container formats (ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX) to evade the Mark-of-the-Web flag. It demonstrates the security risks of container file formats and assists red team operators with initial access techniques.

Use cases

• package payloads into containers that avoid mark-of-the-web flag
• demonstrate motw evasion risks in container file formats
• red team initial access payload delivery
• bypass office protected view macro blocking in demos
• embed files into iso or vhd without propagating motw
• security awareness training on containerized malware

When to choose

• you need a PoC showing how container formats evade MOTW
• you are a red team operator preparing initial access tradecraft
• you want to demonstrate the risk of ISO/VHD-based malware delivery to stakeholders

When to avoid

• you need a general-purpose archiving utility for legitimate file packaging
• you want defensive detection tooling rather than offensive simulation
• you cannot use offensive security tooling in your environment

Facets

cli-tool · maturity active

security cryptography compression cli security penetration-testing files windows python cli windows cross-platform red-team motw-evasion payload-packaging initial-access offensive-security container-formats

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mgeeky/PackMyPayload")