f8faa1f767
fix: normalize all command timeout flags to Int64P across client codebase
2026-03-13 02:49:01 +02:00
bb2edf63cf
Add file tab completer to more commands
2026-02-22 16:37:30 -08:00
a805161245
Add themes and console switcher
2026-02-07 15:46:17 -08:00
b04fff21fd
Fix format str errors
2025-10-04 11:49:32 -07:00
3f656da786
Add readmes and AGENT.md
2025-10-04 10:25:58 -07:00
927ff9c4ab
Added ps detection for Faronics Anti-Executable processes
...
Signed-off-by: Signum21 <Signum21@users.noreply.github.com >
2025-05-09 00:07:37 +02:00
25668a6d82
Correcting condition in client ps command
2025-04-21 12:57:50 -04:00
3ae8353030
Changes to reduce the amount of information pulled by ps by default, changing deprecated x/sys/windows calls
2025-04-15 08:27:32 -04:00
2eabfc255b
Fix typo
2025-03-18 18:10:23 -04:00
d0375da6e4
Add Palo Alto Cortex processes to knownSecurityTools
2025-03-18 18:02:15 -04:00
baa3659f20
Add elastic binaries to knownSecurityTools
2024-02-06 15:36:59 -05:00
f50a1ed243
services: Moving strings from implant to client, renaming StartExistingService to StartServiceByName, removing unnecessary test
2024-01-15 13:30:57 -05:00
0bfa34357e
Adding help for services command
2024-01-15 11:08:46 -05:00
ad1ee0a52d
Adding the services command for getting information about and controlling services on Windows
2024-01-15 10:48:59 -05:00
849f6fb683
Rewiring the grep, head, and tail commands; fixing timeout for procdump command
2024-01-09 12:24:59 -05:00
eecaeabf45
Merge branch 'beacon-commands' of https://github.com/maxlandon/sliver into maxlandon-beacon-commands
2024-01-02 16:11:42 -08:00
b080e06039
Fixing issue with removal of hosts and an issue where the host ID for loot did not populate in the database
2023-12-15 13:49:17 -05:00
853fb02e9f
Fix duplicate sectool names
2023-11-19 11:01:05 -07:00
4f9943ec41
Fix duplicate sectool names
2023-11-19 10:59:42 -07:00
5b415c5aa1
chore: remove refs to deprecated io/ioutil
...
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com >
2023-10-19 20:06:45 +08:00
9b5d4c3bab
Update ps.go
...
Added more MDE processes
Signed-off-by: Alexander Georgiev <alexander.georgiev@daloo.de >
2023-08-31 15:13:53 +02:00
a79b397d17
Merge branch 'master' into beacon-commands
2023-08-09 19:05:56 -05:00
0a32ca109d
Added Cybereason ActiveProbe to known processes
2023-08-09 16:01:03 -04:00
12065fdb99
Rename SliverConsoleClient to SliverClient
2023-07-23 19:48:38 +02:00
ba34df3b4b
Merge remote-tracking branch 'BishopFox/master' into beacon-commands
2023-07-19 02:37:44 +02:00
1a43e70fd1
Fix pstree
2023-07-11 12:25:23 -07:00
51473ec137
Add many missing completers
2023-06-22 20:26:04 +02:00
e23f040962
Split sliver commands in their files
2023-06-22 17:55:32 +02:00
049ec78422
Commit new client console.
2023-06-03 03:59:24 +02:00
d4fd8dc675
Merge master
2023-05-12 22:24:09 -07:00
d921c3c56d
Add ESET Internet Security to kwnown security processes
2023-05-05 10:58:50 +02:00
eba14591f5
Merge master
2023-04-28 10:15:35 -07:00
fce0221bc7
Add Rapid 7
2023-04-27 09:07:48 +02:00
93632466f9
Merge branch 'master' into v1.6.0/master
2023-02-01 09:14:34 -08:00
9f73e636b4
Added Defender for Endpoint processes
...
Added Defender for Endpoint processes based on https://medium.com/csis-techblog/silencing-microsoft-defender-for-endpoint-using-firewall-rules-3839a8bf8d18
Signed-off-by: Alexander Georgiev <alexander.georgiev@daloo.de >
2023-01-24 14:16:44 +01:00
25b14a97e2
merge master
2022-11-04 20:39:49 -07:00
d13e3fc61e
Fix terminate to support beacons
2022-11-04 15:27:57 -07:00
f9382baa35
Merge branch 'master' into v1.6.0/master
2022-11-02 16:14:45 -07:00
170c2bc462
Use nodes vs branches when it makes sense.
2022-11-02 15:24:37 -07:00
ac56a98671
Safely delete nodes
2022-11-02 15:18:57 -07:00
6c7814ce4f
Fix pstree
2022-11-02 14:24:10 -07:00
f66f61eb01
Merge branch 'master' into v1.6.0/master
2022-11-02 09:13:48 -07:00
418b061c14
Add support for ps tree
2022-11-01 22:42:38 -07:00
95ea7d8390
Fix indentation
2022-11-01 15:47:06 -07:00
4b3a9dad8a
Refactoring loot/creds schemes
2022-10-18 16:45:41 -07:00
88abea26a7
Add sysmon + sysmon64
...
As Sysmon is more commonly used for logging I assume we should flag it also as known security tool.
Signed-off-by: cmprmsd <73472903+cmprmsd@users.noreply.github.com >
2022-09-08 10:46:53 +02:00
120d537044
Merge pull request #855 from faisalfs10x/faisalfs10x-patch-1
...
Add trend micro processes
2022-09-07 19:12:07 -05:00
59781d4328
Update ps.go
...
Signed-off-by: Faisal Fs <51811615+faisalfs10x@users.noreply.github.com >
2022-09-08 06:36:05 +08:00
e4793cf616
Add trend micro processes
...
Add known Trend Micro processes
reference: https://success.trendmicro.com/dcx/s/solution/1122160-monitoring-deep-security-services?language=en_US&sfdcIFrameOrigin=null
Signed-off-by: Faisal Fs <51811615+faisalfs10x@users.noreply.github.com >
2022-09-08 06:08:43 +08:00
b68f4bffd3
Add additional known security tools
...
Few more SentinelOne processes. Cylance and Tanium processes.
2022-09-07 17:00:33 -04:00
0xOral