0x1 Posted October 12, 2019 Share Posted October 12, 2019 This is the hidden content, please Sign In or Sign Up Warning: Sliver is currently in alpha, you've been warned 🙂 Implant framework This is the hidden content, please Sign In or Sign Up Sliver is a general purpose cross-platform implant framework that supports C2 over Mutual-TLS, HTTP(S), and DNS. Implants are dynamically compiled with unique X.509 certificates signed by a per-instance certificate authority generated when you first run the binary. The server, client, and implant all support MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all). Features Dynamic code generation Compile-time obfuscation Local and remote process injection Anti-anti-anti-forensics Secure C2 over mTLS, HTTP(S), and DNS Windows process migration Windows user token manipulation Multiplayer-mode Procedurally generated C2 over HTTP (work in progress) Let's Encrypt integration In-memory .NET assembly execution DNS Canary Blue Team Detection Getting Started This is the hidden content, please Sign In or Sign Up Source Code The source code repo contains the following directories: assets/ - Static assets that are embedded into the server binary, generated by go-assets.sh client/ - Client code, the majority of this code is also used by the server protobuf/ - Protobuf code server/ - Server-side code sliver/ - Implant code, rendered by the server at runtime util/ - Utility functions that may be shared by the server and client Link to comment Share on other sites More sharing options...
Recommended Posts