https://github.com/acoyfellow/ascii-smuggler
Payload encoding toolkit for Unicode smuggling, steganography, and text obfuscation
https://github.com/acoyfellow/ascii-smuggler
ai ai-agents ascii red-team security
Last synced: 15 days ago
JSON representation
Payload encoding toolkit for Unicode smuggling, steganography, and text obfuscation
- Host: GitHub
- URL: https://github.com/acoyfellow/ascii-smuggler
- Owner: acoyfellow
- License: mit
- Created: 2026-02-09T16:43:48.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2026-02-17T13:13:24.000Z (5 months ago)
- Last Synced: 2026-02-17T18:07:09.830Z (5 months ago)
- Topics: ai, ai-agents, ascii, red-team, security
- Language: TypeScript
- Homepage: https://ascii-smuggler.coey.dev/
- Size: 76.2 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ASCII Smuggler
Payload encoding toolkit for Unicode smuggling, steganography, and text obfuscation.
**[Live Demo →](https://ascii-smuggler.coey.dev/)**
  
## What it does
Encode and decode text using 8 different smuggling techniques:
| Technique | Category | Risk | Description |
|---|---|---|---|
| Unicode Confusables | Visual | High | Cyrillic/Greek lookalike substitution |
| Zero-Width Encoding | Steganographic | Critical | Invisible zero-width character encoding |
| Hex Escape Encoding | Obfuscation | Medium | `\xNN` hex escape sequences |
| Chunked Base64 | Obfuscation | Medium | Indexed base64 segments |
| RTL Override | Directional | High | Right-to-left text direction spoofing |
| HTML Comment Injection | Structural | Medium | Payload hidden in HTML comments |
| Case-Bit Steganography | Steganographic | Low | Binary data in letter casing |
| Multi-Script Homoglyphs | Visual | High | Cross-script character substitution |
## Features
- **Pipeline mode** — chain multiple techniques together
- **Diff view** — see exactly which codepoints changed
- **Hex dump** — raw byte inspection
- **Codepoint inspector** — visual Unicode analysis
- **Operation log** — track every encoding step
- **Copy / Reverse** — quick workflow actions
- **Responsive** — works on mobile
## Stack
- [Astro](https://astro.build) — static site framework
- [React](https://react.dev) — interactive island
- [Tailwind CSS v4](https://tailwindcss.com) — styling
- [Cloudflare Pages](https://pages.cloudflare.com) — hosting
## Development
```bash
npm install
npm run dev
```
Open [http://localhost:4321](http://localhost:4321).
## Build
```bash
npm run build
```
Output goes to `dist/`.
## Deploy to Cloudflare Pages
### Option 1: Git integration
1. Push to GitHub
2. Go to [Cloudflare Pages](https://dash.cloudflare.com/?to=/:account/pages/new/provider/github)
3. Select the repo
4. Settings:
- **Build command**: `npm run build`
- **Build output**: `dist`
- **Node version**: 18+
### Option 2: Direct upload
```bash
npm run build
npx wrangler pages deploy dist --project-name=ascii-smuggler
```
## Educational Purpose
This tool is built for **security research and education**. Understanding these encoding techniques helps defenders build better detection systems. Use responsibly.
## License
MIT