GO-2025-4079: Silver has unrestricted traffic between Wireguard clients in github.com/bishopfox/sliver

core

package

v1.4.21 Latest Latest Go to latest Published: Aug 26, 2021 License: GPL-3.0 Imports: 15 Imported by: 27

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func TunnelLoop(rpc rpcpb.SliverRPCClient) error
type ChannelProxy
type Portfwd
- func (p *Portfwd) GetMetadata() *PortfwdMeta
type PortfwdMeta
type Reaction
type Tunnel
- func (tun *Tunnel) Read(data []byte) (int, error)
- func (tun *Tunnel) Write(data []byte) (int, error)

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	// Reactions - Manages/tracks reactions
	Reactions = &reactions{
		reactionMap: map[string][]Reaction{},
		mutex:       &sync.RWMutex{},
	}

	// ReactableEvents - A list of reactionable events
	ReactableEvents = []string{
		consts.SessionOpenedEvent,
		consts.SessionUpdateEvent,
		consts.SessionClosedEvent,
		consts.CanaryEvent,
		consts.WatchtowerEvent,
		consts.LootAddedEvent,
		consts.LootRemovedEvent,
	}
)

View Source

var (
	// Portfwds - Struct instance that holds all the portfwds
	Portfwds = portfwds{
		// contains filtered or unexported fields
	}
)

View Source

var (
	// Tunnels - Holds refs to all tunnels
	Tunnels tunnels
)

Functions ¶

func TunnelLoop ¶

func TunnelLoop(rpc rpcpb.SliverRPCClient) error

TunnelLoop - Parses incoming tunnel messages and distributes them

to session/tunnel objects

Types ¶

type ChannelProxy ¶ added in v1.4.12

type ChannelProxy struct {
	Rpc     rpcpb.SliverRPCClient
	Session *clientpb.Session

	BindAddr        string
	RemoteAddr      string
	KeepAlivePeriod time.Duration
	DialTimeout     time.Duration
}

ChannelProxy binds the Sliver Tunnel to a net.Conn object one ChannelProxy per port bind.

Implements the Target interface from tcpproxy pkg

func (*ChannelProxy) HandleConn ¶ added in v1.4.12

func (p *ChannelProxy) HandleConn(conn net.Conn)

HandleConn - Handle a TCP connection

func (*ChannelProxy) Host ¶ added in v1.4.12

func (p *ChannelProxy) Host() string

Host - Returns the host (i.e., interface) of the TCP proxy

func (*ChannelProxy) HostPort ¶ added in v1.4.12

func (p *ChannelProxy) HostPort() (string, uint32)

HostPort - Returns the host and port of the TCP proxy

func (*ChannelProxy) Port ¶ added in v1.4.12

func (p *ChannelProxy) Port() uint32

Port - Returns the TCP port of the proxy

type Portfwd ¶ added in v1.4.12

type Portfwd struct {
	ID           int
	TCPProxy     *tcpproxy.Proxy
	ChannelProxy *ChannelProxy
}

Portfwd - Tracks portfwd<->tcpproxy

func (*Portfwd) GetMetadata ¶ added in v1.4.12

func (p *Portfwd) GetMetadata() *PortfwdMeta

GetMetadata - Get metadata about the portfwd

type PortfwdMeta ¶ added in v1.4.12

type PortfwdMeta struct {
	ID         int
	SessionID  uint32
	BindAddr   string
	RemoteAddr string
}

PortfwdMeta - Metadata about a portfwd listener

type Reaction ¶ added in v1.4.19

type Reaction struct {
	ID        int      `json:"-"`
	EventType string   `json:"event_type"`
	Commands  []string `json:"commands"`
}

Reaction - Metadata about a portfwd listener

type Tunnel ¶

type Tunnel struct {
	ID        uint64
	IsOpen    bool
	SessionID uint32

	Send chan []byte
	Recv chan []byte
}

Tunnel - Duplex data tunnel

func (*Tunnel) Read ¶

func (tun *Tunnel) Read(data []byte) (int, error)

Read - Reader method for interface

func (*Tunnel) Write ¶

func (tun *Tunnel) Write(data []byte) (int, error)

Write - Writer method for interface

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL