Affected by GO-2024-2993 and 1 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

dllhijack

package

v1.6.6 Latest Latest Go to latest Published: Jan 16, 2026 License: GPL-3.0 Imports: 12 Imported by: 1

Details

Implements the 'dllhijack' command group for the Sliver client console.

commands.go – Registers the dllhijack command, its flags, and completions for selecting remote DLL targets.
dllhijack.go – Performs the RPC call that plants a Sliver DLL alongside a target executable for hijacking.

This section is empty.

This section is empty.

func Commands(con *console.SliverClient) []*cobra.Command

Commands returns the “ command and its subcommands.

func DllHijackCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

DllHijackCmd -- implements the dllhijack command

This section is empty.