Affected by GO-2024-2993 and 5 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver

GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver

GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver

GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver

test/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

Directories ¶

Path	Synopsis
e2e
coverage Package coverage records and renders Sliver comprehensive end-to-end test coverage.	Package coverage records and renders Sliver comprehensive end-to-end test coverage.
report command
rportfwd-report command
rportfwdcoverage Package rportfwdcoverage records the fixed reverse-port-forward end-to-end scenarios independently of the comprehensive command coverage catalog.	Package rportfwdcoverage records the fixed reverse-port-forward end-to-end scenarios independently of the comprehensive command coverage catalog.
shellcode-report command
shellcodecoverage Package shellcodecoverage records and reports the fixed Sliver shellcode end-to-end test matrix.	Package shellcodecoverage records and reports the fixed Sliver shellcode end-to-end test matrix.
reflektor

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL