sliver-c2
Audited by Socket on Oct 11, 2026
4 alerts found:
Securityx4SUSPICIOUS。该技能与其声明目的一致,但其目的本身是为 AI 代理提供完整 C2 与后渗透能力:植入生成、持久控制、横向移动、凭据提取、键盘记录和内网代理。安装源与 Sliver 官方来源一致,因此不像伪装窃密器;但 curl|bash 安装、Armory 第三方扩展、以及可直接执行高影响攻击动作,使其整体安全风险极高。不是已确认恶意软件,但应按高危 offensive-security skill 处理。
This is operational documentation for Sliver post-exploitation capabilities, including credential theft, surveillance, execution, and lateral-control techniques. It is not executable code and shows no evidence that the fragment itself performs these actions. Its use is high risk outside an explicitly authorized security assessment.
This is operational documentation for a dual-use C2 framework, with concrete instructions for generating implants, establishing covert/fallback communications, detecting sandbox analysis, and tunneling or forwarding traffic. The fragment itself is not executable malware, but its instructions could enable unauthorized access and evasion. The resolver workaround can disrupt DNS configuration if followed.
This is operational documentation for Sliver C2 implant generation, including stealth, staging, and injection workflows. The text itself does not execute or transmit data, but it provides actionable guidance that could facilitate unauthorized access. Review in the context of the project's authorized security-testing purpose.