Affected by GO-2024-2993 and 6 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver

GO-2026-4548: Sliver has Potential Zip Bomb Denial of Service in GzipEncoder in github.com/bishopfox/sliver

GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver

GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver

GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver

cli

package

v1.7.1 Latest Latest Go to latest Published: Feb 8, 2026 License: GPL-3.0 Imports: 29 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

server/cli

Overview

CLI entrypoint for running the server daemon. Parses flags, configures logging, and launches the service runtime. Key routines cover certs, daemon, operator, and unpack within the cli subsystem.

Go Files

builder.go – CLI commands for server-side payload building.
certs.go – CLI actions for certificate management.
cli.go – Root command setup and flag parsing for the server CLI.
daemon.go – Commands to run the server daemon and control lifecycle.
operator.go – Operator management commands (create/list/etc.).
unpack.go – Extracts embedded assets from the server binary.
version.go – Prints server build/version information.

Documentation ¶

Index ¶

Variables
func Execute()
func StartPersistentJobs(listenerJobs []*clientpb.ListenerJob) error
type CA

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	// CATypes - CA types
	CATypes = map[string]string{
		"operator": certs.OperatorCA,
		"mtls":     certs.MtlsImplantCA,
		"https":    certs.HTTPSCA,
	}
)

Functions ¶

func Execute ¶

func Execute()

Execute - Execute root command

func StartPersistentJobs ¶ added in v1.6.0

func StartPersistentJobs(listenerJobs []*clientpb.ListenerJob) error

Types ¶

type CA ¶

type CA struct {
	Certificate string `json:"certificate"`
	PrivateKey  string `json:"private_key"`
}

CA - Exported CA format

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL