Havoc
Havoc is a modern and malleable post-exploitation command and control framework that provides a client-server architecture with a cross-platform UI, teamserver, and demon agent, offering features such as payload generation, customizable C2 profiles, and extensibility through external C2 and custom agents. It supports multiple platforms including Debian, Ubuntu, and Kali Linux, and requires a modern version of Qt and Python 3.10.x. The framework is still in an early state of release and breaking changes may be made to APIs/core structures as it matures.
FEATURES
ALTERNATIVES
A reconnaissance tool that retrieves information from Office 365 and Azure Active Directory using a valid credential.
A C/C++ tool for remote process injection, supporting x64 and x86 operations, with system call macros generated by SysWhispers script.
A full-featured reconnaissance framework for web-based reconnaissance with a modular design.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
A guide on basic Linux privilege escalation techniques including enumeration, data analysis, exploit customization, and trial and error.
A blog post about bypassing AppLocker using PowerShell diagnostic scripts
SharpPrinter enables efficient discovery of network printers for security and management purposes.
A VM for mobile application security testing, Android and iOS applications, with custom-made tools and scripts.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.