Lightweight Red Team encoding utility for payload obfuscation, WAF evasion research, and offensive security experimentation.
Panda Encoder is a lightweight command-line utility developed by BlackPanda Labs for encoding and obfuscating payloads used in security testing and WAF evasion research.
The tool is designed for:
- Red Team simulations
- Payload transformation
- WAF bypass experimentation
- Secure laboratory research
- Offensive security learning environments
Install globally via NPM:
npm install -g @blackpanda-labs/panda-encoderVerify installation:
panda-encode --helpAfter installation, you can use the encoder from any terminal window.
panda-encode "your-payload-here"panda-encode "<script>alert('BP-LABS')</script>"| Encoder | Purpose |
|---|---|
| Base64 | Standard obfuscation for payload delivery |
| Hex Encoding | Bypasses simple string-matching filters |
| Double URL Encoding | Useful against multi-layer WAF inspection |
<script>alert('BP-LABS')</script>πΌ BlackPanda Encoder
[Base64]
PHNjcmlwdD5hbGVydCgnQlAtTEFCUycpPC9zY3JpcHQ+
[Hex]
3c7363726970743e616c657274282742502d4c41425327293c2f7363726970743e
[Double URL]
%253Cscript%253Ealert('BP-LABS')%253C%252Fscript%253EPlanned future improvements:
- Decoder support
- ROT13 encoder
- Binary encoder
- JWT utilities
- Interactive CLI mode
- Colored terminal output
- File input support
- Batch payload processing
- Plugin-based encoder architecture
- CI/CD pipeline integration
| Attribute | Value |
|---|---|
| Lead Researcher | Debojit Singh |
| Organization | BlackPanda Labs |
| Research Field | Offensive Security / Evasion Techniques |
| Category | Red Team Utility (RT-01) |
| License | MIT |
BlackPanda Labs is focused on building next-generation offensive security infrastructure and educational tooling.
- Project Panda-CTF β Internal offensive security training platform
- AD Domination Labs β Active Directory attack simulation environments
- The Armory β Python & C-based Red Team tooling
- Zero-Day Mindset β Vulnerability research and exploit development
| Resource | Link |
|---|---|
| Live Research Portal | https://blackpanda-lab-prod-production.up.railway.app/ |
| NPM Package | https://www.npmjs.com/package/@blackpanda-labs/panda-encoder |
| WhatsApp Community | https://chat.whatsapp.com/EHxUeKcbR0Q7VLkLRsZKoH |
Contributions are welcome.
- Encoder implementations
- CLI improvements
- Documentation enhancements
- Unit testing
- GitHub Actions workflows
- Payload processing optimizations
git clone https://github.com/BlackPanda-Labs/panda-encoder.git
cd panda-encoder
npm installRun locally:
node index.jspanda-encoder/
β
βββ src/
β βββ encoders/
β βββ decoders/
β βββ utils/
β
βββ tests/
βββ .github/
βββ package.json
βββ README.md
βββ LICENSEThis project is intended strictly for:
- Educational purposes
- Authorized security research
- Defensive testing
- Controlled laboratory environments
Unauthorized usage against systems without explicit permission may violate applicable laws and regulations.
BlackPanda Labs and its contributors assume no responsibility for misuse or damages caused by this software.
Licensed under the MIT License.
πΌ BlackPanda Labs
No shortcuts. No handouts. Just offensive mastery.