InfinityCurve Labs

Forging the Future of Offensive Security

[InfinityCurve Labs @InfinityXCurve]

Havoc Professional Finally Released! 🕸️🕷️

Since our last blog post introducing the Havoc Professional framework and the Kaine-Kit, we've been refining the framework behind the scenes.

https://t.co/8tMfbkZVpj

[5pider @C5pider]

New Release Havoc Professional 0.7: K-Noir 🐺

- Linux Implant for x86_64 and AArch64
- Stack Spoofing: Callstack Function Rule System
- Stack Spoofing: CET Compliance and evasion improvements.
- New Registry manipulation extension with anti-forensic features
- TCP based channels for direct and p2p communication
- New thread injection and memory allocation techniques via the Inject-kit
- Embedded Python Debug Server into the Havoc Client

And major Quality-of-Life improvements and features for operational use while making it more stable and modular.

Link down below 🔗

[5pider @C5pider]

Another small demonstration video is online!

In this demonstration we are going to cover the vm-filesystem project which utilizes the Firebeam Virtual Machine to interact with the target filesystem and monkey patch python methods which the File Browser uses to interact with the agent.

YouTube and Github Link below🔗

[5pider @C5pider]

I have released another video about Havoc Professional!

This video is demonstrating the "Fallback Listeners" capability which allows the operator to embed additional listener configurations into the implant in case the primary or secondary listener fails.

Link below🔗

[5pider @C5pider]

I release a short demonstration of the Kaine Extension System, allowing the operator to fully configure what features and evasion capabilities the agent should have and contain.

https://t.co/fCpHKwY4tX

[5pider @C5pider]

One of the questions I have received a lot of times and was important to me was making Havoc agnostic to external services such as for reporting, logs and more. With this being said it is really easy to write components for both the backend, frontend (client), and for the agents within Havoc Professional. Plugins to ingest events and logs into reporting toolings such as Ghostwriter is trivial!

Demonstrating that Red Teams can write their own plugin components to properly embed Havoc into the infrastructure and workflow.

[5pider @C5pider]

I never mentioned Havoc Pro has its own only APIs. I ensured existing BOFs run out-of-the-box without operators needing more than a single script at most. If I add my own APIs, they’ll be alongside CS APIs so customers aren’t forced to adapt or waste time. My priority is preventing operators from doing unnecessary R&D, so Havoc supports all CS APIs. This isn’t about ToS otherwise Outflank and Nighthawk couldn’t use CS APIs either. When a framework refuses CS API support, it’s usually ego, leaving customers to struggle instead of providing at least minimal compatibility. All CS, TrustedSec, and Outflank BOFs work unmodified on Havoc :)

[5pider @C5pider]

Introducing Havoc Professional: A Lethal Presence

We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!

https://t.co/0aPVihoFIU