Cracken + Havoc
Once it ships, Cracken will drive Havoc's Demon agents and listeners as stages of a validated intrusion. Every action will stay under the same approval gates.
Connecting Havoc
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Not running yet
- Requires
The C2 Tools entitlement, which only unlocks the (empty) C2 tab in the Integration Center — no connector ships yet
What Cracken gets from Havoc
Cracken reads nothing from Havoc until its connector ships.
What Havoc does not do
Nothing yet — Havoc's Integration Center card is a Coming soon placeholder reading "Not available yet", with no configuration dialog behind it. There is no Havoc connector, so Demon sessions, their check-ins and task output are not visible to Cracken.
How Cracken uses Havoc
- 01
Establish a foothold
- 02
Land a Demon under approval
- 03
Prove impact end to end
Frequently asked questions
How does Cracken use Havoc?
Cracken will drive Havoc's Demon agents and their HTTP, HTTPS, or SMB listeners as ordered stages of one intrusion, not isolated beacons.
Does Cracken run Havoc without approval?
No; every Havoc action stays within the autonomy and scope limits your team sets, and anything outside waits for a person to approve it.
More integrations
Brute Ratel
When it ships, Cracken will drive Brute Ratel's Badger implants across an operation.
Cobalt Strike
When it ships, Cracken will drive Cobalt Strike's Beacon from your team server.
Covenant
When it ships, Cracken will drive Covenant's in-memory Grunts across an operation.