Sliver

Sliver is a golang C2 Framework developed by Bishop Fox

Server

start sliver server — ./sliver-server

Listeners – These are the C2 options available

  • http
  • https
  • ntls
  • wireguard

Commands

  • jobs — this will show the jobs that are running on the server
  • http — this will spin up the listener
  • generate — this will build out the implant and spit out a binary
    • generate -b localhost –os linux –arch amd64 –skip-symbols –debug
  • sessions — this will show current sessions
  • use — this will let you interact with session
  • multiplayer — this mode will allow multiple users to interact with implants
  • info — gives details about beacon
  • reconfig — allows you to reconfigure jitter interval
    • reconfig -i 5s -j 1s
  • interactive — this will spin up a session in the same process and run as a separate thread
  • background — sends session to background
  • socks5 start — starts a socks proxy
  • socks5 stop -i (session number)
  • close — kills session

 

Sessions vs implants

  • sessions — this is sending requests every few milliseconds. Constantly communicating. This will allow network intensive tasks
  • beacons — this implant sleeps and calls back with different jitters. Slower response. Maintains low network footprint
    • generate beacon -b localhost –os linux –arch amd64 –skip-symbols –debug
  • To switch between both

Client

This client basically just connects to server