| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/bishopfox/sliver | ≥ 1.5.0, < 1.5.40 | 1.5.40 |
| sliver | ≥ 1.5.0, < 1.5.40 | 1.5.40 |
The current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. (Reserved CVE ID: CVE-2023-34758)
Please see the PoC repo.
Please also see the PoC repo. To setup a simple PoC environment,
notepad.exe window should pop up on the implanted VM.A successful attack grants the attacker permission to execute arbitrary code on the implanted device.
https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/implant.go
https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/crypto.go
https://github.com/tangent65536/Slivjacker
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free