Affected by GO-2024-2993 and 3 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver

GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver

implant

package

v1.7.2 Latest Latest Go to latest Published: Feb 23, 2026 License: GPL-3.0 Imports: 1 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

implant

Overview

Top-level tooling for building and maintaining Sliver implant payloads. Provides build pipelines, dependency vendoring, and shared entrypoints. Runtime components handle generate for implant-side implant features.

Go Files

generate.go – Implements top-level implant build wiring invoked from the server/client tooling.
implant.go – Entry point for compiling implants and exposing shared build helpers.

Sub-packages

scripts/ – Helper scripts and utilities for implant vendor management and automation. Includes tooling for syncing nested vendored dependencies.
sliver/ – Core Go implementation of the Sliver implant runtime and supporting subsystems. Houses communications, task execution, and platform abstraction layers.

Documentation ¶

Index ¶

Variables

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	// FS - Embedded FS access to sliver implant code
	//go:embed sliver/**
	FS embed.FS

	// GoMod - Templated go.mod module file for implant builds
	//go:embed go-mod
	GoMod string

	// GoSum - Templated go.sum module file for implant builds
	//go:embed go-sum
	GoSum string

	// Vendor - Embedded FS access to vendored sliver implant dependencies
	//go:embed vendor/**
	Vendor embed.FS
)

Functions ¶

This section is empty.

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
scripts
sliver
constants
cryptography
encoders
encoders/basex Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.	Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.
encoders/traffic
evasion
extension
forwarder
handlers
handlers/matcher
handlers/tunnel_handlers
hostuuid
limits
locale
locale/jibberjabber
mount
netstack
netstat
pivots
priv
procdump
proxy Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL.	Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL.
ps
registry
rportfwd
runner
screen
service
shell
shell/pty Package pty provides functions for working with Unix terminals.	Package pty provides functions for working with Unix terminals.
shell/ssh
spoof
syscalls
taskrunner
tcpproxy
transports
transports/dnsclient
transports/httpclient
transports/httpclient/drivers/win/tools command
transports/httpclient/drivers/win/wininet Code generated by tools/defines.go; DO NOT EDIT.	Code generated by tools/defines.go; DO NOT EDIT.
transports/mtls
transports/pivotclients
transports/wireguard
util
version
winhttp

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL