HavocFramework/Havoc

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

8507 stars · 1243 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Havoc is a modern, malleable post-exploitation command and control (C2) framework with a Go teamserver, a Qt-based cross-platform client, and a C/ASM implant called Demon. It supports multiplayer operation, payload generation, HTTP/HTTPS listeners, customizable C2 profiles, and extensibility via a Python API and custom agents.

Use cases

• run a red team command and control server
• generate obfuscated payloads like exe, shellcode, and dll
• manage post-exploitation sessions across a team
• build custom C2 profiles and listeners
• extend a C2 framework with Python modules
• test endpoint detection against advanced implant techniques

When to choose

• you need an open-source alternative to commercial C2 frameworks like Cobalt Strike
• you want a multiplayer C2 with a modern GUI client
• you need a highly customizable and extensible post-exploitation framework
• you are doing authorized red team or penetration testing engagements

When to avoid

• you have no authorization to test systems you do not own
• you need guaranteed evasion out of the box - the framework is designed for malleability, not built-in evasion
• you need a simple vulnerability scanner rather than a full C2 platform

Facets

framework · maturity active

security penetration-testing agent-framework gui cli security penetration-testing developer-tools windows cross-platform go cpp python c2-framework post-exploitation red-team command-and-control payload-generation cobalt-strike-alternative linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="HavocFramework/Havoc")