Havij is distributed by itsecteam, an Iranian security company. The word 'Havij' translates to 'carrot' and indeed, Havij uses a carrot as icon. In its default setting, Havij is easily identified by its user agent: It does support POST but in my limited testing appears to be less reliable. Mozilla/4.0 (compatible MSIE 7.0 Windows NT 5.1 SV1. The attack method is pretty straight forward.