Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/shaheeryasirofficial/smugglemypayload
Defensive ToolsPhishing ToolsPayload GenerationScripting & AutomationPhishingSocial EngineeringRed TeamingPayload DevelopmentAdversarial Attack

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
GitHubshaheeryasirofficial/smugglemypayload

SmuggleMyPayload

Generates HTML smuggling pages that embed and reconstruct files client-side via JavaScript, with payload encoding, chunking, obfuscation, and phishing lure templates.

View Repository
393810 days agoReviewed by Kitploit
Share

SmuggleMyPayload

Preview SmuggleMyPayload is an HTML Smuggling toolkit for generating HTML pages that embed and reconstruct files using JavaScript. It provides multiple HTML Smuggling methods, payload encoding options, JavaScript variations, and several built-in HTML templates.

Features

Preview

  • Multiple HTML Smuggling methods
  • Multiple HTML templates
  • Base64 payload encoding
  • Payload chunking
  • JavaScript-based file reconstruction
  • JavaScript string obfuscation
  • Randomized JavaScript variable names
  • Automatic download functionality
  • Iframe Blob delivery
  • Custom HTML templates
  • Custom page titles and branding
  • Interactive CLI
  • Command-line arguments
  • No external Python dependencies

Templates

  • Microsoft 365 MFA Update
  • DocuSign Document Ready
  • SharePoint File Share
  • OneDrive Secure Download
  • Azure Portal Alert
  • Generic Download Page
  • Custom

    • Delivery Mechanisms :

    • Click to Download + JavaScript Obfuscation
    • Auto Download
    • Iframe Blob Delivery

    Requirements

    • Python 3.9+
    • No external Python packages
    • The tool only uses Python's standard library.

    Installation

    Clone the repository:

    root@kitploit:~
    git clone https://github.com/shaheeryasirofficial/SmuggleMyPayload
cd SmuggleMyPayload
cd Source
python3 SmuggleMyPayload.py

    Working

    Preview

    Author

    Shaheer Yasir (Maverick)

    • GitHub: @shaheeryasirofficial

    Acknowledgments & Credits

    Special thanks and credits to:

    • MGeeky For his research and valuable contributions to HTML Smuggling techniques and offensive tooling.
    • White Knight Labs For their training, research materials, and ongoing contributions to the offensive security community.
    • Lavender For her support.

    Disclaimer

    This tool is created for educational and research purposes only. It is not intended for production environments or unauthorized testing.

    License

    This project is released under the MIT License. See the repository for full license details.

    Download Tool