Havoc


Havoc is a modern and malleable post-exploitation command and control framework, created by @C5pider.




### Quick Start > Please see the [Wiki](https://github.com/HavocFramework/Havoc/wiki) for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid issues. You'll need a modern version of Qt and Python 3.10.x to avoid build issues. See the [Installation](https://havocframework.com/docs/installation) docs for instructions. If you run into issues, check the [Known Issues](https://github.com/HavocFramework/Havoc/wiki#known-issues) page as well as the open/closed [Issues](https://github.com/HavocFramework/Havoc/issues) list. --- ### Features #### Client > Cross-platform UI written in C++ and Qt - Modern, dark theme based on [Dracula](https://draculatheme.com/) #### Teamserver > Written in Golang - Multiplayer - Payload generation (exe/shellcode/dll) - HTTP/HTTPS listeners - Customizable C2 profiles - External C2 #### Demon > Havoc's flagship agent written in C and ASM - Sleep Obfuscation via [Ekko](https://github.com/Cracked5pider/Ekko), Ziliean or [FOLIAGE](https://github.com/SecIdiot/FOLIAGE) - x64 return address spoofing - Indirect Syscalls for Nt* APIs - SMB support - Token vault - Variety of built-in post-exploitation commands - Patching Amsi/Etw via Hardware breakpoints - Proxy library loading - Stack duplication during sleep.

#### Extensibility - [External C2](https://github.com/HavocFramework/Havoc/wiki#external-c2) - Custom Agent Support - [Talon](https://github.com/HavocFramework/Talon) - [Python API](https://github.com/HavocFramework/havoc-py) - [Modules](https://github.com/HavocFramework/Modules) --- ### Community You can join the official [Havoc Discord](https://discord.gg/z3PF3NRDE5) to chat with the community! ### Note Please do not open any issues regarding detection. The Havoc Framework hasn't been developed to be evasive. Rather it has been designed to be as malleable & modular as possible. Giving the operator the capability to add custom features or modules that evades their targets detection system.