Affected by GO-2024-2993 and 5 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver

GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver

GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver

GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver

taskrunner

package

v1.7.4 Latest Latest Go to latest Published: Mar 30, 2026 License: GPL-3.0 Imports: 11 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

implant/sliver/taskrunner

Overview

Task scheduler running queued implant jobs. Controls execution order, retries, and task telemetry. Runtime components handle dotnet windows, task, task darwin, and task linux for implant-side taskrunner features.

Go Files

dotnet_windows.go – Handles .NET task execution specifics on Windows.
task.go – Defines the core task runner, queue, and lifecycle logic.
task_darwin.go – macOS adaptations for task execution.
task_linux.go – Linux adaptations for task execution.
task_windows.go – Windows-specific task execution helpers.

Documentation ¶

Rendered for

Index ¶

func LocalTask(data []byte, rwxPages bool) error
func RandomString(length int) string
func RemoteTask(processID int, data []byte, rwxPages bool) error
func Sideload(procName string, procArgs []string, _ uint32, data []byte, args []string, ...) (string, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func LocalTask ¶

func LocalTask(data []byte, rwxPages bool) error

LocalTask - Run a shellcode in the current process Will hang the process until shellcode completion

func RandomString ¶ added in v1.5.40

func RandomString(length int) string

func RemoteTask ¶

func RemoteTask(processID int, data []byte, rwxPages bool) error

RemoteTask -

func Sideload ¶

func Sideload(procName string, procArgs []string, _ uint32, data []byte, args []string, kill bool) (string, error)

Sideload - Side load a library and return its output

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL