HTMLSmuggler

screenshot of HTMLSmuggler

HTML Smuggling generator&obfuscator for your Red Team operations

## Overview
HTMLSmuggler is an innovative JavaScript payload generator designed for those looking to bypass network security controls, such as firewalls and intrusion detection systems (IDS). By leveraging the technique of HTML smuggling, this tool hides malicious payloads within seemingly benign HTML and JavaScript code. The end goal is to enable attackers to deliver harmful content to users’ browsers without raising any security alarms, making it a potent tool for those with nefarious intentions.

The backbone of HTMLSmuggler lies in its ability to create an independent JavaScript library that embeds user-defined payloads seamlessly. This library can be integrated into various platforms like phishing sites or email attachments, ensuring that the malicious payload reaches the target system effectively. The tool's design emphasizes simplicity and flexibility, allowing for customization to suit different attack vectors.

## Features
- **Configurable JavaScript Obfuscator:** Includes a powerful obfuscator that completely hides your payload, making it virtually impossible to extract manually.
- **Client-side Bot Detection Library:** Built to ensure that your payloads aren't shared with secure mail gateways, thereby enhancing secrecy.
- **Delay Mechanism:** Features a loading delay to evade detection by rapid-scan sandboxes.
- **Framework Compatibility:** Can be utilized as a standalone JS library or integrated into popular frameworks such as React and Vue.js.
- **Customizability:** The tool's simplistic template enables users to add data handlers, compression algorithms, and additional obfuscation techniques easily.
- **Browser Support:** Compatible with a broad spectrum of browsers, including legacy versions like IE10.
- **Easy Installation:** Requires basic setup with yarn package manager and straightforward dependency installation for quick deployment.
eslint
Eslint

ESLint is a linter for JavaScript that analyzes code to detect and report on potential problems and errors, as well as enforce consistent code style and best practices, helping developers to write cleaner, more maintainable code.

webpack
Webpack

Webpack is a popular open-source module bundler for JavaScript applications that bundles and optimizes the code and its dependencies for production-ready deployment. It can also be used to transform other types of assets such as CSS, images, and fonts.