Hak5 Packet Squirrel
Pocket Ethernet multi-tool for capture, MITM and VPN
The Hak5 Packet Squirrel is a pocket-sized Ethernet multi-tool for penetration testers and network engineers. Drop it inline between a device and the network, pick a payload with the switch, and use it for packet capture, traffic manipulation, DNS tricks, or remote access over a VPN — without hauling a full laptop into the rack.
Key features
Inline Ethernet man-in-the-middle in a small form factor
Packet capture to USB storage (PCAP) for later analysis in tools such as Wireshark
Switch-selectable payloads with LED feedback
Payloads in Hak5 DuckyScript plus familiar Linux tooling (Bash; Python on supported firmware)
VPN-oriented workflows (for example OpenVPN / WireGuard on current Packet Squirrel firmware)
USB powered for tidy long- or short-term drops
Typical use
Opportunistic wired assessments, capturing traffic on a segment you are authorised to monitor, teaching network security concepts, and providing a compact VPN or pivoting foothold during a scoped engagement.
At a glance
| Role | Inline Ethernet multi-tool (capture / MITM / remote access) |
| Payloads | Switch-selected; DuckyScript and Linux shell tooling |
| Connectivity | Dual Ethernet path; USB power (and USB host for storage on supported models) |
| Management | SSH / web UI depending on firmware and payload |
For authorised testing only. Confirm the exact Packet Squirrel hardware revision in the box against Hak5’s current docs if you need Mark II-specific ports or dimensions.
Sources: Hak5 Packet Squirrel product pages and documentation.