InfinityCurve Labs @InfinityXCurve

Forging the Future of Offensive Security infinitycurve.org Joined August 2025

Tweets

8
Followers

304
Following

3
Likes

15

5pider @C5pider

2 weeks ago

I released another video demonstration! This time I am demonstrating the stack spoofing capabilities, especially CET compliance and being able to migrate into an CET enabled process such as Microsoft Edge (or any Chromium based browser with CET support) and retrieving credentials and cookies via cookie-monster BOF There is no illegal activity, Havoc Professional is a registered dual-use product and regulated under the EU001 Export Control List YouTube Link below🔗

5 31 228 15K 77

View Details

5pider @C5pider

4 months ago

Another small demonstration video is online! In this demonstration we are going to cover the vm-filesystem project which utilizes the Firebeam Virtual Machine to interact with the target filesystem and monkey patch python methods which the File Browser uses to interact with the agent. YouTube and Github Link below🔗

3 24 152 13K 60

View Details

5pider @C5pider

4 months ago

I have released another video about Havoc Professional! This video is demonstrating the "Fallback Listeners" capability which allows the operator to embed additional listener configurations into the implant in case the primary or secondary listener fails. Link below🔗

10 22 153 11K 39

View Details

5pider @C5pider

5 months ago

I release a short demonstration of the Kaine Extension System, allowing the operator to fully configure what features and evasion capabilities the agent should have and contain. youtube.com/watch?v=a8YZPl…

5 30 122 18K 43

View Details

5pider @C5pider

5 months ago

One of the questions I have received a lot of times and was important to me was making Havoc agnostic to external services such as for reporting, logs and more. With this being said it is really easy to write components for both the backend, frontend (client), and for the agents within Havoc Professional. Plugins to ingest events and logs into reporting toolings such as Ghostwriter is trivial! Demonstrating that Red Teams can write their own plugin components to properly embed Havoc into the infrastructure and workflow.

3 24 129 11K 38

View Details

5pider @C5pider

11 months ago

I never mentioned Havoc Pro has its own only APIs. I ensured existing BOFs run out-of-the-box without operators needing more than a single script at most. If I add my own APIs, they’ll be alongside CS APIs so customers aren’t forced to adapt or waste time. My priority is preventing operators from doing unnecessary R&D, so Havoc supports all CS APIs. This isn’t about ToS otherwise Outflank and Nighthawk couldn’t use CS APIs either. When a framework refuses CS API support, it’s usually ego, leaving customers to struggle instead of providing at least minimal compatibility. All CS, TrustedSec, and Outflank BOFs work unmodified on Havoc :)

2 2 52 4K 4

View Details

5pider @C5pider

a year ago

Introducing Havoc Professional: A Lethal Presence We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth! infinitycurve.org/blog/introduct…