HTMLSmuggler – HTML Smuggling Generator And Obfuscator For Your Red Team Operations

” dir=”auto”>
<script>
import { download } from './payload.esm';
</script>
  • Call download() function:

    </template>
  • Happy phishing 🙂

  • FAQ

    Q: I have an error RangeError: Maximum call stack size exceeded, how to solve it?

    A: This issue described here. To fix it, try to disable splitStrings in obfuscator.js or make smaller payload (it’s recommended to use up to 2 MB payloads because of this issue).


    Q: Why does my payload build so long?

    A: The bigger payload you use, the longer it takes to create a JS file. To decrease time of build, try to disable splitStrings in obfuscator.js. Below is a table with estimated build times using default obfuscator.js.

    Payload size Build time
    525 KB 53 s
    1.25 MB 8 m
    3.59 MB 25 m



    A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

    If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

     To keep up to date follow us on the below channels.