Affected by GO-2024-2993 and 1 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

cursed

package

v1.6.6 Latest Latest Go to latest Published: Jan 16, 2026 License: GPL-3.0 Imports: 31 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

client/command/cursed

Overview

Implements the 'cursed' command group for the Sliver client console. Handlers map Cobra invocations to cursed workflows such as cursed chrome, cursed console, cursed cookies, and cursed edge.

Go Files

commands.go – Exposes the cursed command suite and binds individual subcommands for supported targets.
cursed-chrome.go – Launches or hijacks Chrome debugging sessions, locating executables and wiring remote control.
cursed-console.go – Provides the interactive cursed console experience atop Chrome DevTools sessions.
cursed-cookies.go – Fetches and displays browser cookies from an active cursed session.
cursed-edge.go – Mirrors the Chrome workflow for Microsoft Edge, including process discovery logic.
cursed-electron.go – Drives cursed interactions with arbitrary Electron apps, validating binaries and starting injected sessions.
cursed-rm.go – Removes cursed sessions from the client cache and tears down associated resources.
cursed-screenshot.go – Captures screenshots from a cursed browser context via DevTools APIs.
cursed.go – Manages the cursed process registry, selection helpers, and remote debugger configuration defaults.

Documentation ¶

Index ¶

Variables
func Commands(con *console.SliverClient) []*cobra.Command
func CursedChromeCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedConsoleCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedCookiesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedEdgeCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedElectronCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedRmCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
func CursedScreenshotCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrUserDataDirNotFound      = errors.New("could not find Chrome user data dir")
	ErrChromeExecutableNotFound = errors.New("could not find Chrome executable")
	ErrUnsupportedOS            = errors.New("unsupported OS")
)

Functions ¶

func Commands ¶ added in v1.6.0

func Commands(con *console.SliverClient) []*cobra.Command

Commands returns the “ command and its subcommands.

func CursedChromeCmd ¶

func CursedChromeCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

CursedChromeCmd - Execute a .NET assembly in-memory.

func CursedCmd ¶

func CursedCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

CursedChromeCmd - Execute a .NET assembly in-memory.

func CursedConsoleCmd ¶

func CursedConsoleCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func CursedCookiesCmd ¶ added in v1.5.28

func CursedCookiesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func CursedEdgeCmd ¶

func CursedEdgeCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

CursedChromeCmd - Execute a .NET assembly in-memory.

func CursedElectronCmd ¶

func CursedElectronCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func CursedRmCmd ¶

func CursedRmCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

func CursedScreenshotCmd ¶

func CursedScreenshotCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL