iiinova — where your digital self keeps evolving

5pider @5pider.net · 17/09/2026

New Release Havoc Professional 0.8: Leviathan 🩸 - Introducing Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support Release: www.infinitycurve.org/blog/leviathan

infinitycurve.org

Havoc Professional 0.8: Leviathan

Introducing Kaine User-Defined C2, expanded Linux post-ex capabilities, refactored port forwarding and sleep masking, enhanced .NET/PowerSafe execution, Beacon Object File improvements, In-Memory PE E...

084

5pider @5pider.net · 05/08/2026

Still WIP but as least the lifting and recompilation works flawlessly. FYI the original obj file does not have the LLVM bitcode embedded, I want it to work on any native formats but for now object files should be sufficient 🙃 [3/3]

000

5pider @5pider.net · 05/08/2026

by simply lifting them up to LLVM IR via remill and have them being recompiled into a format of my choosing such as my bytecode or even perform other passes on the IR and back to it's original format. [2/3]

100

5pider @5pider.net · 05/08/2026

Finally got around to getting a working PoC of my native object file to LLVM IR lifter. Started this small side-project to see how far can I push my own VM tech and perhaps transpiling existing tradecrafts, executables and post-ex toolings [1/3]

100

5pider @5pider.net · 06/07/2026

see soon coming changes :) we are working on something regarding this!

010

5pider @5pider.net · 06/07/2026

I released another video demonstration about the stack spoofing capabilities and especially CET compliance and being able to migrate into an CET enabled process such as Microsoft Edge and retrieving the passwords and cookies database via the cookie-monster BOF www.youtube.com/watch?v=hQqI...

youtube.com

Havoc Professional 0.7 - CET Compliant Stack Spoofing and Browser Cookie Dumping

YouTube video by 5pider

272

5pider @5pider.net · 05/06/2026

New Release: Havoc Professional 0.7 K-Noir 🐺 New Linux implant for x86_64 and AArch64, Stack Spoofing related improvments such as CET compliance and a function rule system, new registry manipulation extension and injection based capabilities. Link: www.infinitycurve.org/blog/k-noir

infinitycurve.org

Havoc Professional 0.7: K-Noir

An introduction to Havoc Professional 0.7 K-Noir, featuring a new Linux implant for x86_64 and AArch64, CET compliant stack spoofing and rules systems, new Direct and P2P communication channels, new m...

052

5pider @5pider.net · 24/02/2026

Havoc Professional Finally Released! 🕸️🕷️ I'm excited to finally share the work my team and I have put in over the past year. This is just the beginning of what we have planned. www.infinitycurve.org/blog/release

infinitycurve.org

Havoc Professional Release

The initial release of the long awaited Havoc Professional and the Kaine-kit is finally here and new team member.

044

5pider @5pider.net · 12/07/2025

Haha used to be true in my OSS version. The Pro tho has been rewritten from scratch (client, agent and server) and now utilizes Chacha20-poly1305 + X25519 for secure communication.

010

5pider @5pider.net · 12/07/2025

I wanna emphasis that Havoc Professional has been completely rewritten from scratch (2023 - 2025), addressing and fixing architectural/design issues and implemented strong security for the agent, team server and client for safe operational use. Thanks to people helping me out via giving me feedback

010

5pider @5pider.net · 12/07/2025

Not anymore, the open source version used to be like this but now I utlize Chacha20-poly1305 + X25519 for secure key exchange. (more can be read on the website under Kaine-kit FAQ) I have learned a lot throughout my years of C2/Malware development 😊

100

5pider @5pider.net · 11/07/2025

Thank you so much Raphael! 😊

000

5pider @5pider.net · 10/07/2025

This means so much coming this from you Raphael! You have been a huge inspiration and ur work has been insanely inspiring to me for years and I always believed your methodology and philosophy to be the key and proper way of doing and designing malware and C2s 😄

000

5pider @5pider.net · 09/07/2025

I never expected to see my Stardust being mentioned here! This made me beyond happy and especially considering Raphael has been my biggest inspiration in this community since I started out at Infosec. Thanks a lot for these kind comments and mention. It truly made my day

030