LogoHackDB
icon of Havoc

Havoc

Havoc is a modern, malleable post-exploitation C2 framework with sleep obfuscation, return address spoofing, and indirect syscalls.

Introduction

Havoc is a post-exploitation command and control (C2) framework designed for red teams. It offers features like:

  • Cross-platform UI: Built with C++ and Qt, featuring a modern dark theme.
  • Multiplayer Teamserver: Written in Go, supporting multiple operators.
  • Payload Generation: Creates executables, shellcode, and DLLs.
  • Customizable C2 Profiles: Allows operators to tailor communication.
  • Sleep Obfuscation: Employs Ekko, Ziliean, or FOLIAGE to evade detection.
  • Indirect Syscalls: Uses Nt* APIs to bypass security measures.
  • Token Vault: Securely manages tokens.
  • Extensibility: Supports external C2, custom agents, Python API, and modules.

Information

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates