Affected by GO-2024-2993
and 5 other vulnerabilities
GO-2024-2993: Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
GO-2026-4280: Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver
GO-2026-4466: Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver
GO-2026-4609: Sliver is Vulnerable to Authenticated Nil-Pointer Dereference through its Handlers in github.com/bishopfox/sliver
GO-2026-4723: Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports in github.com/bishopfox/sliver
GO-2026-4899: Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver
RPC and event handlers that respond to client and implant requests. Routes gRPC calls to business logic modules. Key routines cover beacons, data cache, pivot, and sessions within the handlers subsystem.
Go Files
beacons.go – Handles beacon-related RPC calls and state updates.
data_cache.go – Caches handler data for reuse across requests.
handlers.go – Registers handler functions and shared middleware.
pivot.go – Processes pivot management RPCs.
sessions.go – Handles session CRUD operations and telemetry routing.
tunnel_writer.go – Sends tunnel responses back to clients.
GetNonPivotHandlers - Server handlers for pivot connections, its important
to avoid a pivot handler from calling a pivot handler and causing a recursive
call stack