Post-Exploitation

Havoc is an open-source command-and-control framework that’s quickly become the go-to alternative to Cobalt Strike for red teamers who can’t justify the $5,000/seat price tag. It’s actively developed, has solid evasion capabilities, and the implant — called Demon — supports most of what you need for a real engagement. This guide walks you through everything: installation, listener setup, Demon payload generation, post-exploitation, and evasion basics. What Is Havoc C2? Havoc is a modern C2 framework built by HavocFramework . The architecture follows the standard red team playbook: ...

Sliver is an open-source C2 framework built by BishopFox. It was designed to replace Cobalt Strike for red teams who can’t or won’t pay $5,000+ per year. Since its release, it’s become one of the most serious alternatives — used by actual red teams, not just CTF players. This guide covers everything: installation, server setup, operator sessions, generating implants, running post-exploitation, and avoiding the common mistakes that get you caught. ...

Command-and-control frameworks are the backbone of every red team operation. Once you have a foothold, C2 is what keeps you in — and what determines whether you get caught. The market shifted hard in the last few years. Cobalt Strike’s $5,000/year price tag pushed teams toward open-source alternatives, and those alternatives caught up fast. Sliver and Havoc aren’t budget substitutes anymore — they’re legitimate tools with their own advantages. This guide breaks down all three: what they do well, where they fall short, and how to decide which one belongs in your toolkit. ...

Metasploit is the exploitation framework everyone knows and half the people actually understand. This cheat sheet covers everything from first-time msfconsole navigation to post-exploitation pivoting — organized by how you actually use it on an engagement, not alphabetically by command. Updated for 2026. Bookmark it. Starting Metasploit # Start msfconsole msfconsole # Start with quiet mode (skip banner) msfconsole -q # Start with a resource script msfconsole -r setup.rc # Start with a specific database msfconsole -y /path/to/database.yml # Update Metasploit msfupdate Database Setup Metasploit’s database stores hosts, services, credentials, and loot. Worth setting up. ...