README
¶
Sliver
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys.
The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all).
Features
- Dynamic code generation
- Compile-time obfuscation
- Multiplayer-mode
- Staged and Stageless payloads
- Procedurally generated C2 over HTTP(S)
- DNS canary blue team detection
- Secure C2 over mTLS, WireGuard, HTTP(S), and DNS
- Fully scriptable using JavaScript/TypeScript or Python
- Windows process migration, process injection, user token manipulation, etc.
- Let's Encrypt integration
- In-memory .NET assembly execution
- COFF/BOF in-memory loader
- TCP and named pipe pivots
- Much more!
Getting Started
Download the latest release and see the Sliver wiki for a quick tutorial on basic setup and usage. To get the very latest and greatest compile from source.
Linux One Liner
curl https://sliver.sh/install|sudo bash and then run sliver
Help!
Please checkout the wiki, or start a GitHub discussion. We also tend to hang out in the #golang Slack channel on the Bloodhound Gang server.
Compile From Source
See the wiki.
Feedback
Please take a moment and fill out our survey
License - GPLv3
Sliver is licensed under GPLv3, some sub-components may have separate licenses. See their respective subdirectories in this project for details.
Directories
¶
| Path | Synopsis |
|---|---|
|
github.com
|
|
|
core
command
|
|
|
core/proxy
Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL.
|
Package proxy allows you to retrieve a system configured proxy for a given protocol and target URL. |
|
core/shell/pty
Package pty provides functions for working with Unix terminals.
|
Package pty provides functions for working with Unix terminals. |
|
core/transports/httpclient/drivers/win/wininet
Code generated by tools/defines.go; DO NOT EDIT.
|
Code generated by tools/defines.go; DO NOT EDIT. |
|
scripts
command
|
|
|
cryptography/minisign
Package minisign implements the minisign signature scheme.
|
Package minisign implements the minisign signature scheme. |
|
encoders/basex
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression.
|
Package basex provides fast base encoding / decoding of any given alphabet using bitcoin style leading zero compression. |
|
leaky
Package lib leakbuf.go is stolen form ss
|
Package lib leakbuf.go is stolen form ss |