Modern post-exploitation command and control framework with a GUI interface, supporting agent communication, payload generation, and team collaboration.
havoc {flags} 📎 flags havoc {flags}Sandbox: execFile · Timeout: 3600s
agent.communication implant.generation post.exploitation command.control.c2 adversary.simulation | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
teamserver-host | string | No | - | Team server host address | --teamserver-host |
teamserver-port | integer | No | - | Team server port | --teamserver-port |
flag-v | boolean | No | - | Verbose output | -v, --verbose |
profile | string | No | - | C2 profile configuration file | --profile |
Inputs
network.target.ip Listener bind address
network.port.number Listener bind port
payload.type Payload type (dll, exe, shellcode)
Outputs
agent.session Active agent session
implant.binary Generated implant payload
network_trafficprocess_spawnfilesystem_write Produces
agent.sessionimplant.binaryConsumes
network.target.ipnetwork.port.numberpayload.type| Resource | Value |
|---|---|
| CPU | medium |
| Memory | 256 MB |
| Network | high |
| Disk I/O | low |
Start the Havoc team server
havoc server --profile havoc.yaotlStart the Havoc client GUI
havoc clientGenerate a default HTTP implant
havoc generate --listener http --target https://example.comHavoc is a modern post-exploitation command and control framework with a native GUI client and team server architecture. It supports multiple agent types, encrypted C2 channels, and integrated reporting for red team operations.
# Start team server
havoc server --profile config.yaotl
# Launch client
havoc client
# Generate agent
havoc generate --listener https --target https://c2.example.com