Affected by 
README
¶
Sliver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys.
The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all).
Visit https://sliver.sh/ for tutorials and documentation.
Features
- Dynamic code generation
- Compile-time obfuscation
- Multiplayer-mode
- Staged and Stageless payloads
- Procedurally generated C2 over HTTP(S)
- DNS canary blue team detection
- Secure C2 over mTLS, WireGuard, HTTP(S), and DNS
- Fully scriptable using Python
- Windows process migration, process injection, user token manipulation, etc.
- Let's Encrypt integration
- In-memory .NET assembly execution
- COFF/BOF in-memory loader
- TCP and named pipe pivots
- Much more!
Getting Started
Download the latest release and see the Sliver wiki for a quick tutorial on basic setup and usage. To get the very latest and greatest compile from source.
Linux One Liner
curl https://sliver.sh/install|sudo bash and then run sliver
Help!
Please checkout the wiki, or start a GitHub discussion.
Compile From Source
See the wiki.
License - GPLv3
Sliver is licensed under GPLv3, some sub-components may have separate licenses. See their respective subdirectories in this project for details.
Directories
¶
| Path | Synopsis |
|---|---|
|
spin/thinking
Package thinking provides Crush's pending-request animation as a reusable Bubble Tea component.
|
Package thinking provides Crush's pending-request animation as a reusable Bubble Tea component. |
|
scripts
command
|
|
|
sliver/encoders/basex
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.
|
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression. |
|
sliver/proxy
Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL.
|
Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL. |
|
sliver/shell
Package shell starts and manages operating-system shell processes for Sliver tunnels.
|
Package shell starts and manages operating-system shell processes for Sliver tunnels. |
|
sliver/shell/pty
Package pty provides functions for working with Unix terminals.
|
Package pty provides functions for working with Unix terminals. |
|
sliver/transports/httpclient/drivers/win/wininet
Package wininet provides the Windows WinINet HTTP transport.
|
Package wininet provides the Windows WinINet HTTP transport. |
|
sliverpb
Package sliverpb contains protobuf messages and protocol constants shared by Sliver clients, servers, and implants.
|
Package sliverpb contains protobuf messages and protocol constants shared by Sliver clients, servers, and implants. |
|
core/rtunnels
Package rtunnels owns reverse-port-forward authorization and relay state.
|
Package rtunnels owns reverse-port-forward authorization and relay state. |
|
encoders/shellcode/sgn/generate
command
|
|
|
test
|
|
|
e2e/coverage
Package coverage records and renders Sliver comprehensive end-to-end test coverage.
|
Package coverage records and renders Sliver comprehensive end-to-end test coverage. |
|
e2e/report
command
|
|
|
e2e/rportfwd-report
command
|
|
|
e2e/rportfwdcoverage
Package rportfwdcoverage records the fixed reverse-port-forward end-to-end scenarios independently of the comprehensive command coverage catalog.
|
Package rportfwdcoverage records the fixed reverse-port-forward end-to-end scenarios independently of the comprehensive command coverage catalog. |
|
e2e/shellcode-report
command
|
|
|
e2e/shellcodecoverage
Package shellcodecoverage records and reports the fixed Sliver shellcode end-to-end test matrix.
|
Package shellcodecoverage records and reports the fixed Sliver shellcode end-to-end test matrix. |
|
reflektor
command
|
|
|
cmd/assets
command
|
|
|
encoders/basex
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.
|
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression. |
|
leaky
Package lib leakbuf.go is stolen form ss
|
Package lib leakbuf.go is stolen form ss |
|
minisign
Package minisign implements the minisign signature scheme.
|
Package minisign implements the minisign signature scheme. |