Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/HavocFramework/Havoc/llms.txt

Use this file to discover all available pages before exploring further.

The Operators section defines users who can connect to the Havoc Teamserver from the client application.

Syntax

Operators {
    user "username" {
        Password = "password"
    }
}

Parameters

user
block
required
Defines an operator with authentication credentials. The string following user is the username.
Password
string
required
The password for the operator account.
Passwords are transmitted over the encrypted teamserver connection. Use strong passwords in production environments.

Examples

Single Operator

Operators {
    user "admin" {
        Password = "super_secure_password_123"
    }
}

Multiple Operators

Operators {
    user "5pider" {
        Password = "password1234"
    }

    user "Neo" {
        Password = "password1234"
    }

    user "operator3" {
        Password = "another_secure_pass"
    }
}

Multi-Operator Support

Havoc supports multiple simultaneous operator connections to the same teamserver. Each operator:
  • Has their own unique username and password
  • Can view all connected agents and sessions
  • Can issue commands independently
  • Sees activity from other operators in real-time

Client Connection

When connecting from the Havoc client:
  1. Enter the teamserver Host and Port (from the Teamserver profile section)
  2. Enter your operator username
  3. Enter your operator Password
  4. Click “Connect”
The username is case-sensitive and must match exactly as defined in the profile.

Security Considerations

  • Always use strong, unique passwords for each operator
  • Change default passwords immediately
  • Limit operator accounts to trusted team members only
  • Consider rotating passwords periodically during long engagements

Profile Structure

Operators are typically defined alongside other profile sections:
Teamserver {
    Host = "0.0.0.0"
    Port = 40056
}

Operators {
    user "redteam1" {
        Password = "secure_pass_1"
    }

    user "redteam2" {
        Password = "secure_pass_2"
    }
}

Demon {
    Sleep = 2
    Jitter = 20
}

Build docs developers (and LLMs) love