InfinityCurve Labs

Forging the Future of Offensive Security

[InfinityCurve Labs @InfinityXCurve]

New Release Havoc Professional 0.8: Leviathan 🩸

- Introduce Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support

https://t.co/z9yYilS9pl

[5pider @C5pider]

Halloween Update 🎃👻

Added numerous new features related to operational security, introduced WebSockets as a communication channel, added file based P2P capabilities, improved the user interface, and fixed bugs reported by customers found within the malleable C2 profile system.

Another exciting addition is independent ingress/egress listener configuration, allowing operators to use separate communication channels for task requests and returning execution results simultaneously!
I recorded a small video demonstration of said feature.

YouTube Link below🔗

[kozmer @k0zmer]

this is my c2, there are many like it, but this one is mine.

[InfinityCurve Labs @InfinityXCurve]

@PumpkinSecurity Most operators mostly run sessions from different operating systems on the same TeamServer that they are facing during their engagement. No need to have them run in separate team servers unless they belong to different operational projects.

[InfinityCurve Labs @InfinityXCurve]

New Release Havoc Professional 0.8: Leviathan 🩸

- Introduce Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support

https://t.co/z9yYilS9pl

[InfinityCurve Labs @InfinityXCurve]

@PumpkinSecurity Linux post-ex capabilities are tied to the Linux agent. While both windows and Linux agent share the same architectural design, those are two different codebases targeting different operating systems.

[5pider @C5pider]

New Release Havoc Professional 0.8: Leviathan 🩸

- Introducing Kaine User-Defined C2
- Expanded Linux post-ex capabilities
- Refactored port forwarding and sleep masking
- Enhanced .NET/PowerSafe execution
- In-Memory PE Execution and BOF-PE support
- HTTP/s Server Name Indication (SNI) Spoofing
- License Updates / Air-gapped licensing
- Havoc client UI overhaul & cross-platform support

Release Link Below🔗

[5pider @C5pider]

I released another video demonstration!

This time I am demonstrating the stack spoofing capabilities, especially CET compliance and being able to migrate into an CET enabled process such as Microsoft Edge (or any Chromium based browser with CET support) and retrieving credentials and cookies via cookie-monster BOF

There is no illegal activity, Havoc Professional is a registered dual-use product and regulated under the EU001 Export Control List

YouTube Link below🔗

[5pider @C5pider]

Another small demonstration video is online!

In this demonstration we are going to cover the vm-filesystem project which utilizes the Firebeam Virtual Machine to interact with the target filesystem and monkey patch python methods which the File Browser uses to interact with the agent.

YouTube and Github Link below🔗

[5pider @C5pider]

I have released another video about Havoc Professional!

This video is demonstrating the "Fallback Listeners" capability which allows the operator to embed additional listener configurations into the implant in case the primary or secondary listener fails.

Link below🔗

[5pider @C5pider]

I release a short demonstration of the Kaine Extension System, allowing the operator to fully configure what features and evasion capabilities the agent should have and contain.

https://t.co/fCpHKwY4tX

[5pider @C5pider]

One of the questions I have received a lot of times and was important to me was making Havoc agnostic to external services such as for reporting, logs and more. With this being said it is really easy to write components for both the backend, frontend (client), and for the agents within Havoc Professional. Plugins to ingest events and logs into reporting toolings such as Ghostwriter is trivial!

Demonstrating that Red Teams can write their own plugin components to properly embed Havoc into the infrastructure and workflow.

[InfinityCurve Labs @InfinityXCurve]

Havoc Professional Finally Released! 🕸️🕷️

Since our last blog post introducing the Havoc Professional framework and the Kaine-Kit, we've been refining the framework behind the scenes.

https://t.co/8tMfbkZVpj

[5pider @C5pider]

I never mentioned Havoc Pro has its own only APIs. I ensured existing BOFs run out-of-the-box without operators needing more than a single script at most. If I add my own APIs, they’ll be alongside CS APIs so customers aren’t forced to adapt or waste time. My priority is preventing operators from doing unnecessary R&D, so Havoc supports all CS APIs. This isn’t about ToS otherwise Outflank and Nighthawk couldn’t use CS APIs either. When a framework refuses CS API support, it’s usually ego, leaving customers to struggle instead of providing at least minimal compatibility. All CS, TrustedSec, and Outflank BOFs work unmodified on Havoc :)

[5pider @C5pider]

Introducing Havoc Professional: A Lethal Presence

We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth!

https://t.co/0aPVihoFIU