Affected by GO-2024-2993
and 3 other vulnerabilities
GO-2024-2993 : Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver
GO-2026-4280 : Sliver Vulnerable to Pre-Auth Memory Exhaustion via NoEncoder Bypass in github.com/bishopfox/sliver
GO-2026-4445 : Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
GO-2026-4466 : Sliver has DNS C2 OTP Bypass that Allows Unauthenticated Session Flooding and Denial of Service in github.com/bishopfox/sliver
Discover Packages
github.com/bishopfox/sliver
server
cli
package
Version:
v1.6.2
Opens a new window with list of versions in this module.
Published: Jan 8, 2026
License: GPL-3.0
Opens a new window with license information.
Imports: 29
Opens a new window with list of imports.
Imported by: 2
Opens a new window with list of known importers.
README
README
¶
server/cli
Overview
CLI entrypoint for running the server daemon. Parses flags, configures logging, and launches the service runtime. Key routines cover certs, daemon, operator, and unpack within the cli subsystem.
Go Files
builder.go – CLI commands for server-side payload building.
certs.go – CLI actions for certificate management.
cli.go – Root command setup and flag parsing for the server CLI.
daemon.go – Commands to run the server daemon and control lifecycle.
operator.go – Operator management commands (create/list/etc.).
unpack.go – Extracts embedded assets from the server binary.
version.go – Prints server build/version information.
Expand ▾
Collapse ▴
Documentation
¶
Execute - Execute root command
type CA struct {
Certificate string `json:"certificate"`
PrivateKey string `json:"private_key"`
}
CA - Exported CA format
Source Files
¶
Click to show internal directories.
Click to hide internal directories.