Affected by GO-2024-2993 and 5 other vulnerabilities

GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver

GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver

GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver

GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver

GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver

GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver

console

package

v1.7.4 Latest Latest Go to latest Published: Mar 30, 2026 License: GPL-3.0 Imports: 34 Imported by: 4

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/bishopfox/sliver

Links

Open Source Insights

README ¶

server/console

Overview

Administrative console helpers bundled with the server. Provides shared console-mode code reused by client tooling. Key routines cover console admin within the console subsystem.

Go Files

console-admin.go – Implements admin console commands exposed by the server.
console-admin_test.go (tests) – Tests admin console behaviors.
console.go – Core console runtime used for server-side interactive sessions.

Documentation ¶

Index ¶

Constants
func DefaultOperatorWireGuardEnabled() bool
func JobStartClientListener(multiplayerListener *clientpb.MultiplayerListenerReq) (int, error)
func NewOperatorConfig(operatorName string, lhost string, lport uint16, permissions []string, ...) ([]byte, error)
func Start(rcScript string)

Constants ¶

View Source

const (

	// Info - Display colorful information
	Info = bold + cyan + "[*] " + normal
	// Warn - Warn a user
	Warn = bold + red + "[!] " + normal
	// Debug - Display debug information
	Debug = bold + purple + "[-] " + normal
	// Woot - Display success
	Woot = bold + green + "[$] " + normal
)

Variables ¶

This section is empty.

Functions ¶

func DefaultOperatorWireGuardEnabled ¶ added in v1.7.4

func DefaultOperatorWireGuardEnabled() bool

DefaultOperatorWireGuardEnabled returns the default wireguard mode for new operator configs based on the current server multiplayer exposure.

func JobStartClientListener ¶ added in v1.6.0

func JobStartClientListener(multiplayerListener *clientpb.MultiplayerListenerReq) (int, error)

func NewOperatorConfig ¶ added in v1.5.0

func NewOperatorConfig(operatorName string, lhost string, lport uint16, permissions []string, includeWG bool) ([]byte, error)

NewOperatorConfig - Generate a new player/client/operator configuration

func Start ¶

func Start(rcScript string)

Start - Starts the server console

Types ¶

This section is empty.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
forms

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL