Affected by GO-2025-4079
and 6 other vulnerabilities
GO-2025-4079: Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver
GO-2026-4445: Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver
GO-2026-4548: Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver
GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver
GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver
This directory contains the protobuf message definitions and is organized in two packages:
client - Generally refered to as clientpb in the code, these messages should only be sent from the client to server or vice versa.
sliver - Referred to as sliverpb in the /server/ code, or simply pb in the /sliver/ code, these message may be sent from the client to the server or from the server to the implant and vice versa.