mr-in4inci3le/sliver-gui

Sliver GUI is a desktop application that gives operators of the Sliver command-and-control framework a visual interface instead of typing everything into a terminal. Sliver itself is a security testing tool built by BishopFox, used by authorized penetration testers and red teams to simulate attacks against systems they own or have explicit permission to test. This project does not replace or reimplement any of Sliver's underlying logic. It is a thin frontend, built with the Wails toolkit (which pairs a Go backend with an HTML, CSS, and JavaScript interface), that talks directly to Sliver's existing gRPC service using the same connection files as the official command line client. The interface shows active sessions and beacons (two types of connections Sliver maintains with target machines) in a table, alongside a visual graph that lays out how those connections are chained together across a network, with color coding to distinguish regular sessions from privileged ones and from beacons. Each connected agent gets its own console window supporting more than seventy commands, plus a full interactive shell. There is also a separate console for server-level commands, screens for generating new implants (the software placed on target machines), and areas for managing collected data such as credentials, loot, and host information. A command palette and audit logging round out the operator experience. Setting it up requires Go, the Wails command line tool, some Linux desktop libraries if building on Linux, and a configuration file issued by a Sliver server operator. Once built, a user connects with that configuration file, starts a listener, generates an implant tied to it, and interacts with any resulting session through the graphical console. The project is maintained by a single credited developer and is explicitly described as intended only for authorized security testing on systems the user owns or has written permission to test. The README lists planned future additions, including password cracking integration and browser injection features, some of which are not yet fully implemented.