BishopFox/sliver

Health v2 · maintenance only

Adoption not part of the score

11729 stars · 1574 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Sliver is an open-source cross-platform adversary emulation and red team framework written in Go. It generates dynamically compiled implants with secure command-and-control over mTLS, WireGuard, HTTP(S), and DNS, plus post-exploitation features like process injection and pivoting.

Use cases

• run red team engagements with secure C2 channels
• emulate adversary tactics during security testing
• generate obfuscated cross-platform implants
• test blue team detection of DNS and HTTP C2 traffic
• perform post-exploitation like process injection and token manipulation
• pivot through compromised hosts via TCP and named pipes
• collaborate with a team on penetration testing operations

When to choose

• you need an open-source alternative to commercial C2 frameworks like Cobalt Strike
• your red team operates across Windows, Linux, and macOS targets
• you want encrypted, resilient C2 over mTLS, WireGuard, HTTPS, or DNS
• you need a scriptable framework with Python bindings and multiplayer support

When to avoid

• you only need a vulnerability scanner rather than a post-exploitation C2 framework
• you lack authorization to perform offensive security testing
• you need a lightweight agent without dynamic payload generation
• your targets are mobile or embedded platforms outside Go's supported OS targets

Facets

framework · maturity active

security penetration-testing networking http-server cli security penetration-testing developer-tools windows go cross-platform cli c2 red-team adversary-emulation implants post-exploitation command-and-control mtls wireguard dns-c2 command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="BishopFox/sliver")