c2-sliver

Manage Sliver C2 Framework servers, listeners, implants, and post-implant operations.

7|1|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill c2-sliver
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: c2-sliver
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/Decepticon/skills/post-exploit/c2-sliver
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill c2-sliver

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the operation of the Sliver C2 Framework, allowing for server setup, implant generation, post-implant operations, and network pivoting.

Core Features & Use Cases

  • Server Connection and Listener Setup: Configure listeners for mTLS, HTTPS, DNS, and WireGuard channels.
  • Implant Generation: Create beacon and session implants for different platforms and architectures.
  • Post-Implant Operations: Conduct host reconnaissance, file and process operations, and credential extraction.
  • Network and Pivot Operations: Set up SOCKS5 proxies, port forwarding, and WireGuard tunnels for pivoting.

Quick Start

Generate a beacon implant for Windows and start an HTTPS listener on port 443 using the c2-sliver skill.

Frequently Asked Questions about c2-sliver

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a Sliver implant for Windows and Linux?

Configure Sliver C2 listeners for mTLS, HTTPS, DNS, and WireGuard communication channels. Listener setup is the foundational step required to receive implant connections before generating and deploying payloads.

Can I pivot networks through a Sliver C2 implant?

Sliver supports network pivoting through SOCKS5 proxies, port forwarding, and WireGuard tunnels. These mechanisms route traffic through compromised implants to access internal network segments that are otherwise unreachable.

What is the difference between Sliver beacons and sessions?

Sliver beacons communicate asynchronously with delayed check-ins to evade detection, while sessions maintain persistent real-time interactive connections. Both implant types support post-exploitation operations but differ in network communication models.

Does the Sliver C2 framework support WireGuard for implant communication?

Sliver supports WireGuard for both implant communication and network pivoting. WireGuard provides an encrypted tunneling channel alongside mTLS, HTTPS, and DNS protocols for C2 listener configuration.

How do I extract credentials and perform host reconnaissance with Sliver?

Extract credentials and perform host reconnaissance through Sliver post-implant operations. After establishing a beacon or session, execute built-in commands for file manipulation, process management, and local system intelligence gathering.