core

Documentation

Index

• Variables
• func TunnelLoop(rpc rpcpb.SliverRPCClient) error
• type BOFArgsBuffer
  • func (b *BOFArgsBuffer) AddData(d []byte) error
  • func (b *BOFArgsBuffer) AddInt(d uint32) error
  • func (b *BOFArgsBuffer) AddShort(d uint16) error
  • func (b *BOFArgsBuffer) AddString(d string) error
  • func (b *BOFArgsBuffer) AddWString(d string) error
  • func (b *BOFArgsBuffer) GetBuffer() ([]byte, error)
• type ChannelProxy
  • func (p *ChannelProxy) HandleConn(conn net.Conn)
  • func (p *ChannelProxy) Host() string
  • func (p *ChannelProxy) HostPort() (string, uint32)
  • func (p *ChannelProxy) Port() uint32
• type Portfwd
  • func (p *Portfwd) GetMetadata() *PortfwdMeta
• type PortfwdMeta
• type Reaction
• type SocksProxy
  • func (p *SocksProxy) GetMetadata() *SocksProxyMeta
• type SocksProxyMeta
• type TcpProxy
• type Tunnel
  • func (tun *Tunnel) Read(data []byte) (int, error)
  • func (tun *Tunnel) Write(data []byte) (int, error)

Variables

var (
	// Reactions - Manages/tracks reactions
	Reactions = &reactions{
		reactionMap: map[string][]Reaction{},
		mutex:       &sync.RWMutex{},
	}

	// ReactableEvents - A list of reactionable events
	ReactableEvents = []string{
		consts.SessionOpenedEvent,
		consts.SessionUpdateEvent,
		consts.SessionClosedEvent,
		consts.BeaconRegisteredEvent,
		consts.CanaryEvent,
		consts.WatchtowerEvent,
		consts.LootAddedEvent,
		consts.LootRemovedEvent,
	}
)

var (
	// SocksProxies - Struct instance that holds all the portfwds
	SocksProxies = socksProxy{
					// contains filtered or unexported fields
	}
	SocksConnPool = sync.Map{}
	SocksProxyID  = 0
)

var (
	// Portfwds - Struct instance that holds all the portfwds
	Portfwds = portfwds{
		// contains filtered or unexported fields
	}
)

var (
	// Tunnels - Holds refs to all tunnels
	Tunnels tunnels
)

Functions

func TunnelLoop

func TunnelLoop(rpc rpcpb.SliverRPCClient) error

TunnelLoop - Parses incoming tunnel messages and distributes them

to session/tunnel objects

Types

type BOFArgsBuffer

type BOFArgsBuffer struct {
	Buffer *bytes.Buffer
}

func (*BOFArgsBuffer) AddData

func (b *BOFArgsBuffer) AddData(d []byte) error

func (*BOFArgsBuffer) AddInt

func (b *BOFArgsBuffer) AddInt(d uint32) error

func (*BOFArgsBuffer) AddShort

func (b *BOFArgsBuffer) AddShort(d uint16) error

func (*BOFArgsBuffer) AddString

func (b *BOFArgsBuffer) AddString(d string) error

func (*BOFArgsBuffer) AddWString

func (b *BOFArgsBuffer) AddWString(d string) error

func (*BOFArgsBuffer) GetBuffer

func (b *BOFArgsBuffer) GetBuffer() ([]byte, error)

type ChannelProxy

type ChannelProxy struct {
	Rpc     rpcpb.SliverRPCClient
	Session *clientpb.Session

	BindAddr        string
	RemoteAddr      string
	KeepAlivePeriod time.Duration
	DialTimeout     time.Duration
}

ChannelProxy binds the Sliver Tunnel to a net.Conn object one ChannelProxy per port bind.

Implements the Target interface from tcpproxy pkg

func (*ChannelProxy) HandleConn

func (p *ChannelProxy) HandleConn(conn net.Conn)

HandleConn - Handle a TCP connection

func (*ChannelProxy) Host

func (p *ChannelProxy) Host() string

Host - Returns the host (i.e., interface) of the TCP proxy

func (*ChannelProxy) HostPort

func (p *ChannelProxy) HostPort() (string, uint32)

HostPort - Returns the host and port of the TCP proxy

func (*ChannelProxy) Port

func (p *ChannelProxy) Port() uint32

Port - Returns the TCP port of the proxy

type Portfwd

type Portfwd struct {
	ID           int
	TCPProxy     *tcpproxy.Proxy
	ChannelProxy *ChannelProxy
}

Portfwd - Tracks portfwd<->tcpproxy

func (*Portfwd) GetMetadata

func (p *Portfwd) GetMetadata() *PortfwdMeta

GetMetadata - Get metadata about the portfwd

type PortfwdMeta

type PortfwdMeta struct {
	ID         int
	SessionID  string
	BindAddr   string
	RemoteAddr string
}

PortfwdMeta - Metadata about a portfwd listener

type Reaction

type Reaction struct {
	ID        int      `json:"-"`
	EventType string   `json:"event_type"`
	Commands  []string `json:"commands"`
}

Reaction - Metadata about a portfwd listener

type SocksProxy

type SocksProxy struct {
	ID           int
	ChannelProxy *TcpProxy
}

SocksProxy - Tracks portfwd<->tcpproxy

func (*SocksProxy) GetMetadata

func (p *SocksProxy) GetMetadata() *SocksProxyMeta

GetMetadata - Get metadata about the portfwd

type SocksProxyMeta

type SocksProxyMeta struct {
	ID        int
	SessionID string
	BindAddr  string
	Username  string
	Password  string
}

PortfwdMeta - Metadata about a portfwd listener

type TcpProxy

type TcpProxy struct {
	Rpc     rpcpb.SliverRPCClient
	Session *clientpb.Session

	Username string
	Password string
	BindAddr string
	Listener net.Listener

	KeepAlivePeriod time.Duration
	DialTimeout     time.Duration
	// contains filtered or unexported fields
}

type Tunnel

type Tunnel struct {
	ID        uint64
	IsOpen    bool
	SessionID string

	Send chan []byte
	Recv chan []byte
}

Tunnel - Duplex data tunnel

func (*Tunnel) Read

func (tun *Tunnel) Read(data []byte) (int, error)

Read - Reader method for interface

func (*Tunnel) Write

func (tun *Tunnel) Write(data []byte) (int, error)

Write - Writer method for interface