Havoc demon interact

Havoc > demon <demon-id> ; shell whoami

Interact with an active Havoc demon (agent) and execute commands on the victim from the C2 console.

When the payload has already been executed and the demon appears in the Session List. From the demon console you can launch shells, execute binaries, inject DLLs, and pivot, all over the C2's encrypted channel.

For non-interactive or automated operations, Havoc allows queuing commands without opening a console. If the goal is extreme stealth, avoid interactive cmd/powershell shells and use the agent's native commands.