Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS. Implants are dynamically compiled with unique X.509 certificates signed by a per-instance certificate authority generated when you first run the binary.
The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all).
- Dynamic code generation
- Compile-time obfuscation
- Staged and Stageless payloads
- Procedurally generated C2 over HTTP(S)
- DNS canary blue team detection
- Secure C2 over mTLS, WireGuard, HTTP(S), and DNS
- Local and remote process injection
- Windows process migration
- Windows user token manipulation
- Let's Encrypt integration
- In-memory .NET assembly execution
Linux One Liner
curl https://sliver.sh/install|sudo bash and then run
Compile From Source
See the wiki.
License - GPLv3
Sliver is licensed under GPLv3, some sub-components may have separate licenses. See their respective subdirectories in this project for details.