Components

Campaign API

The ./HAVOC Campaign API provides the main interface for administering and interacting with ./HAVOC platform resources.

Go to the Architecture page for more details.

Containers tasks

The ./HAVOC container tasks are containers that run common attack tools and exploitable services/applications that provide security testing and validation capabilities. Container task instructions are executed via a Python wrapper (although a custom container task could be created with a wrapper written in any programming language) that provides normalized inputs and outputs. Container tasks can be launched as Amazon ECS tasks directly from the API or run in Docker as remote container tasks.

Remote operator service

The ./HAVOC remote operator service is an installable service that supports the latest Windows and Ubuntu Linux releases. The service can be instructed to perform operations on its host system such as download a file, run a command, generate large files with nonsense data (for testing things like detection of data exfiltration), and create Windows shares.