Affected by GO-2024-2993 and 1 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

console

package

v1.6.4 Latest Latest Go to latest Published: Jan 15, 2026 License: GPL-3.0 Imports: 30 Imported by: 4

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

server/console

Overview

Administrative console helpers bundled with the server. Provides shared console-mode code reused by client tooling. Key routines cover console admin within the console subsystem.

Go Files

console-admin.go – Implements admin console commands exposed by the server.
console-admin_test.go (tests) – Tests admin console behaviors.
console.go – Core console runtime used for server-side interactive sessions.

Documentation ¶

Index ¶

Constants
func JobStartClientListener(multiplayerListener *clientpb.MultiplayerListenerReq) (int, error)
func NewOperatorConfig(operatorName string, lhost string, lport uint16, permissions []string) ([]byte, error)
func Start(rcScript string)
type ClientConfig

Constants ¶

View Source

const (

	// Info - Display colorful information
	Info = bold + cyan + "[*] " + normal
	// Warn - Warn a user
	Warn = bold + red + "[!] " + normal
	// Debug - Display debug information
	Debug = bold + purple + "[-] " + normal
	// Woot - Display success
	Woot = bold + green + "[$] " + normal
)

Variables ¶

This section is empty.

Functions ¶

func JobStartClientListener ¶ added in v1.6.0

func JobStartClientListener(multiplayerListener *clientpb.MultiplayerListenerReq) (int, error)

func NewOperatorConfig ¶ added in v1.5.0

func NewOperatorConfig(operatorName string, lhost string, lport uint16, permissions []string) ([]byte, error)

NewOperatorConfig - Generate a new player/client/operator configuration

func Start ¶

func Start(rcScript string)

Start - Starts the server console

Types ¶

type ClientConfig ¶

type ClientConfig struct {
	Operator      string `json:"operator"`
	Token         string `json:"token"`
	LHost         string `json:"lhost"`
	LPort         int    `json:"lport"`
	CACertificate string `json:"ca_certificate"`
	PrivateKey    string `json:"private_key"`
	Certificate   string `json:"certificate"`
}

ClientConfig - Client JSON config

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
forms

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL