mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its gRPC service no proxies or protocol reimplementations required.
<h1 align="center">Sliver GUI</h1> <p align="center"> A desktop operator console for the <a href="https://github.com/BishopFox/sliver">Sliver C2</a> framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by <a href="https://rajkumarmullapudi.com/">Raj Kumar Mullapudi</a> </p> <p align="center"> <img alt="Go" src="https://img.shields.io/badge/Go-1.25+-00ADD8?logo=go&logoColor=white"> <img alt="Wails" src="https://img.shields.io/badge/Wails-v2-d32f2f"> <img alt="Sliver" src="https://img.shields.io/badge/Sliver-C2-e23c4e"> <img alt="Platform" src="https://img.shields.io/badge/Linux%20%C2%B7%20Windows%20%C2%B7%20macOS-555"> </p> Sliver GUI is a thin [Wails v2](https://wails.io) (Go + plain HTML/CSS/JS) frontend over Sliver's existing `rpcpb.SliverRPC` gRPC service. It reimplements **no** C2 logic and connects with the same mTLS operator `.cfg` files as the official `sliver-client` every command-and-control capability comes from Sliver itself. Because the backend is Go, it imports Sliver's real protobuf/gRPC stubs directly: no grpc-web proxy, no protocol reimplementation, no drift when upstream changes its `.proto`. > **Authorized use only.** This is an offensive-security tool. Use it solely on systems you own > or have explicit written permission to test. --- ## Screenshots <img width="1912" height="837" alt="1" src="https://assets.kitploit.com/production/public/readmes/41164/537b67a00fb2c1741cd7896526394e6fc37d9ab936bac2c54c6630f46c781025.png" /> <br><br> <img width="1912" height="842" alt="2" src="https://assets.kitploit.com/production/public/readmes/41164/0d0ead34f88cd8bd253115b3a9aafc1afc896319f12eeeaf59e8699f119a67bf.png" /> <br><br> <img width="1907" height="826" alt="3" src="https://assets.kitploit.com/production/public/readmes/41164/943a94e48c5feb1de6a405c5f011b1653b718d8d5cd00f8ab6fbee5b841d8bcd.png" /> <br><br> <img width="1907" height="832" alt="4" src="https://assets.kitploit.com/production/public/readmes/41164/cdc18b8a33b167224ee5e76a7482b6a1a07ef9b2bbb5267812037f2554f37ca3.png" /> <br><br> <img width="1904" height="837" alt="5" src="https://assets.kitploit.com/production/public/readmes/41164/dec33a042897286391d16efa443e096ca5ef02550ce1cd109f3ca5d3361625db.png" /> <br><br> <img width="1910" height="830" alt="6" src="https://assets.kitploit.com/production/public/readmes/41164/38109fc7658c473c2a4ee87c925651ad1bf77b0980ac83f962dad0044836bd77.png" /> <br><br> <img width="985" height="467" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/eaa8bd20c5418f3d728a99a2d3545a37e78aa4e617e6d4183ea0684b01318ff9.png" /> <br><br> <img width="1912" height="837" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/407c86d922cf0edfe416d86ff0c9ba0c00d4ad0063cdc4cb920881f52f995a99.png" /> <br><br> <img width="1911" height="840" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/da3c5d6978a6e35f9bc2e54b29819fd48dd752d4fcd1203c2e6d7750965f03cb.png" /> <br><br> <img width="1912" height="832" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/1efaf5dac728f1e670548e0680a2de4ee6af3424705cf11f9898431a3ca9eb5f.png" /> <br><br> <img width="1912" height="756" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/52ebe4dc552b1f3b3507e595a1a208f28e2c803a2f1a597312e54c5675f35f9b.png" /> <br><br> <img width="1912" height="802" alt="image" src="https://assets.kitploit.com/production/public/readmes/41164/6f901f1678744f904e1cb56319614de77799a197cff7017ad5cda1df8ee538e3.png" /> <br><br> <img width="1913" height="807" alt="Screenshot 2026-07-18 014308" src="https://assets.kitploit.com/production/public/readmes/41164/251dd47424261cf3fd5a930cbad57697b195a0fc17038cdb44bf4bc992ae7315.png" /> --- ## Features | Area | What you get | |------|--------------| | **Agents** | Unified sessions + beacons table, plus an interactive **pivot graph** firewall/egress boundary on the left, agents laid out in their real pivot topology (chains joined by session id, so same-host pivots render correctly), arrows colour-coded by agent: **green** session · **red** SYSTEM/privileged · **blue** beacon. | | **Per-agent console** | Real-time (session) or queued (beacon) consoles with **70+ RPC-backed commands**, a full **interactive PTY shell** (`shell -i` / `pty`) over a gRPC tunnel, and **extensions / BOFs** (`ext …`) run through the same flow as the official client. | | **Server console** | A pinned `sliver >` prompt for ~45 teamserver commands. | | **Implants** | **Generate** (mTLS · HTTP · DNS · WireGuard · `tcp-pivot`), profiles, builds, and **armory** install / remove. | | **Data** | Loot · credentials · hosts · operators · full event log. | | **Operator QoL** | JSONL **audit log**, per-teamserver persisted graph layout / notes / integrity, **`Ctrl+K`** command palette, live event stream with toasts, and auto-reconnect. | <details> <summary><b>Full command reference</b></summary> <br> **Per-agent:-** `ps · ls · cd · pwd · cat · mkdir · rm · mv · cp · chmod · chown · download · upload · screenshot · netstat · ifconfig · env · getenv · setenv · unsetenv · reg · grep · mount · memfiles · ssh · whoami · getprivs · getpid · procdump · kill · chtimes · execute · execute-assembly · execute-shellcode · sideload · spawndll · getsystem · make-token · impersonate · rev2self · runas · migrate · backdoor · dllhijack · msf · msf-inject · extensions · ext · socks · portfwd · rportfwd · wg-portfwd · wg-socks · pivot · services · loot · shell · shell -i / pty` · beacon-only: `tasks · reconfig · interactive` **Server:-** `sessions · beacons · jobs [kill] · restart-jobs · operators · loot · hosts · creds · builds · regenerate · profiles · c2profiles · certificates · compiler · builders · traffic-encoders · shellcode-encoders · armory [install/remove] · websites · canaries · stager · use · rename · kill-session · kill-beacon · version · mtls/http/https/dns/wg` </details> --- ## Quick start **Prerequisites** - **Go 1.25.6+** with `GOTOOLCHAIN=auto` the right toolchain is fetched automatically - **[Wails v2 CLI](https://wails.io/docs/gettingstarted/installation)** `go install github.com/wailsapp/wails/v2/cmd/wails@latest` - **Linux WebKit deps** `sudo apt install libgtk-3-dev libwebkit2gtk-4.1-dev build-essential pkg-config` - **A Sliver operator `.cfg`** `sliver-server operator --name <you> --lhost <host> --save <you>.cfg` **Build & run** ```bash go mod tidy make build # → build/bin/sliver-gui (or: wails build -tags webkit2_41) ./build/bin/sliver-gui ``` > Hot reload: `make dev` · tests & linters: `make test` · `make lint` · `make vet` > On WebKit 4.0 systems, use `make build TAGS=` (drop the `webkit2_41` tag). --- ## Usage 1. **Connect** :- select your operator `.cfg`. 2. **Listen** :- start a listener (Listeners panel, or `mtls 8443` in the server console). 3. **Generate** :- build an implant against that listener's C2 (or a `tcppivot://` for pivots), then **Save to disk**. 4. **Run** it on the target the session/beacon appears in the table and graph. 5. **Interact** :- double-click the agent, or `use <id>` in the server console. --- ## Notes - **Sessions vs. beacons** sessions are real-time; beacon output is delayed by the check-in interval (± jitter). - **`getsystem <profile>`** builds from a saved profile, so the profile must be complete and buildable. - **Symbol obfuscation** is off by default so builds work on a stock teamserver (no garble required). - Pinned to a `bishopfox/sliver` **master** commit to match recent / `devel` teamservers on a tagged teamserver, pin the matching Sliver release instead. ## Roadmap `crack` (hashcat cluster) · `cursed` (Chrome/Electron injection) · WASM extension *execution* (listing is wired) · external builder log streaming. --- ## Credits **GUI designed and developed by [Raj Kumar Mullapudi](mailto:[email protected])** the Wails backend, the vanilla-JS/HTML/CSS frontend (pivot graph, per-agent & server consoles, panels, command palette, operator notes), and all RPC wiring. Powered by the **[Sliver C2 framework](https://github.com/BishopFox/sliver)** (BishopFox) and **[Wails](https://wails.io)**. Sliver GUI is a client interface only it does not modify or redistribute the framework. <sub>© 2026 Raj Kumar Mullapudi (GUI frontend) · Sliver C2 © BishopFox</sub>
