An open-source notepad with features that are particularly useful to penetration testers
Switch branches/tags
Nothing to show
Clone or download
Latest commit cfe9f43 May 26, 2018
Type Name Latest commit message Commit time
Failed to load latest commit information.
lualib First commit May 26, 2018
packs/Huntpad First commit May 26, 2018
src First commit May 26, 2018
.gitignore Add git ignore May 26, 2018
CHANGELOG First commit May 26, 2018
COPYRIGHT First commit May 26, 2018
LICENSE First commit May 26, 2018 Update README May 26, 2018


Huntpad is a notepad application with features that are particularly useful to penetration testers and bug hunters - a collection of common injection string generators, hash generators, encoders and decoders, HTML and text manipulation functions, and so on, coupled with syntax highlighting for several programming languages. For more details, visit the Huntpad homepage.


  • /lualib - the source of the Huntpad Forge Lua library containing many of its toolbar functions written in a variety of languages.
  • /packs - contents of the uncompressed pack file Huntpad.scx
  • /src - the main executable source and built-in resource files
  • /html - user interface resources (HTML)
  • /lua - Lua API source


Compiled binaries for Windows can be downloaded from the links below.


For compiling Huntpad, you will just need Catarinka and pLua.

There is no need to install third-party components in the IDE - you can just add the dependencies listed above to the library path and hit compile. It compiles under Delphi 10 Seattle down to XE2.

When starting up, Huntpad will require the Underscript Lua library compiled and some packed resource files from Sandcat (Common.pak and Resources.pak) to work.

License & Credits

Huntpad was developed by Felipe Daragon, Syhunt.

This code is licensed under a 3-clause BSD license - see the LICENSE file for details.

Third-party software used in Huntpad include:

  • Lua - Developed by a small team at Pontifícia Universidade Católica do Rio de Janeiro (PUC-Rio), Lua is a core language used by Huntpad.
  • Sciter is the engine currently used by Huntpad for rendering its user interface toolbar.
  • Icons are derived from: Fugue Icons (by @yusukekamiyamane) and FatCow Icons.
  • For syntax highlighting, Huntpad currently uses SynEdit and @Krystian-Bigaj's SynWeb with a color scheme adapted from @korny's CodeRay.

The license for each component listed above can be found in the /packs/Resources/docs/ directory of the Sandcat repository.


Twitter: @felipedaragon, @syhunt

Email: felipe at