PoC for a Havoc agent/handler setup with all C2 traffic routed through GitHub. No direct connections: all commands and responses are relayed through Issues and Comments for maximum stealth.
☆47Jul 9, 2025Updated last year
Alternatives and similar repositories for HavocHub
Users that are interested in HavocHub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 10 months ago
- Whitepaper☆16Dec 1, 2025Updated 10 months ago
- VolchockC2 is a custom-built Command & Control (C2) framework, currently under active development. Designed for red team operations and a…☆36Jul 31, 2025Updated last year
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- Obfuscate the bytes of your payload with an association dictionary☆78Nov 7, 2025Updated 11 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆72Dec 25, 2025Updated 10 months ago
- ☆52Dec 5, 2025Updated 10 months ago
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- ☆11Oct 27, 2024Updated 2 years ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆310Sep 23, 2025Updated last year
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆67Jun 23, 2025Updated last year
- ZoomBotC2 is a stealthy Command and Control (C2) framework that leverages Zoom's API endpoints for covert communication between implants …☆57Jun 30, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- tsh多终端代理通信☆21Feb 26, 2025Updated last year
- DRILL (Distributable Remote Integrated Lightweight Link) is a powerful and stealthy Command and Control (C2) framework designed for seaml…☆37Jul 31, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆165Jul 23, 2025Updated last year
- This tool helps inject code into the processes of Antivirus programs.☆192May 23, 2026Updated 5 months ago
- Python based tool for generating Shellcode from PIC C☆43Nov 6, 2025Updated 11 months ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process☆44Jun 15, 2022Updated 4 years ago
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 6 months ago
- Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames☆158Nov 23, 2025Updated 11 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆22Oct 14, 2025Updated last year
- inspired by mr d0x filefix☆15Feb 4, 2026Updated 8 months ago
- ☆91May 15, 2024Updated 2 years ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆81Feb 17, 2026Updated 8 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- Ivanti EPM AgentPortal RCE Vulnerability☆20Sep 16, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated last week
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- shellcode transformation tool for YARA evasion☆65Sep 20, 2026Updated last month
- Create Cobalt Strike malleable C2 profiles with HTTPS configs☆18May 23, 2020Updated 6 years ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆93Oct 10, 2022Updated 4 years ago
- BOF to run PE in Cobalt Strike Beacon without console creation☆198Nov 23, 2025Updated 11 months ago