# BishopFox/sliver

> Open-source cross-platform adversary emulation and red team framework: C2 implants over mTLS, WireGuard, HTTP(S) and DNS, plus post-exploitation on macOS, Windows and Linux.

- Magnitude: 3.2 out of 10 — Breakout
- Stars: 12,073 total · +3 stars measured 2026-10-11, 11:04–12:29 UTC, ≈ 18 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Go · License: GPL-3.0 · Created: 2019-01-17 · Last push: 2026-10-10
- GitHub: https://github.com/BishopFox/sliver · Page: https://gitnova.dev/en/r/BishopFox/sliver

## Useful for

- Deploy a C2 server and generate implants over mTLS, HTTP(S) or DNS for authorized red team exercises.
- Test endpoint detection and response tooling by running post-exploitation actions on macOS, Windows and Linux.
- Execute BOF/COFF payloads and native shellcode on amd64/arm64 hosts during a penetration test.

## Why it’s here

- Star-counter measurements on 2026-10-11 (UTC), 11:04–12:29: 12070 → 12073 stars (+3). This is the change over that interval.
- Estimated end-of-day forecast: about +18 stars, using observed gains and the previous day.
- Over the last two days the pace is 4× that of the previous week and a half.
- GitHub Trending Go today: #4, +60 stars.
- About 17 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 1,619
- Issues and pull requests: 2,249
- Watchers: 163
- Average over the last week: 18 per day
- Usual pace: 8 per day
- Stars in the last hour (measured): 2
- Latest release: v1.7.8 (2026-10-03)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-09-12 … 2026-10-11: 6, 4, 10, 7, 8, 5, 5, 6, 5, 8, 5, 14, 3, 2, 8, 4, 21, 13, 8, 6, 7, 7, 7, 5, 13, 11, 8, 8, 60, 3

## Spotted in now

- GitHub Trending Go today: #4, +60 stars

## More in this category

1. **anthropics/oss-scanner** — 6.3 · Early signal · Security · Python · +84 stars measured 2026-10-11, 00:38–12:27 UTC, ≈ 183 by evening
   Anthropic service that scans critical open-source repositories for vulnerabilities: the project is built in an isolated VM without network access, and a report with a reproducer and patch is emailed. Enrollment happens via a PR with a…
   Full card: https://gitnova.dev/en/r/anthropics/oss-scanner.md
2. **mhtsec/ARTEX** — 6.2 · Cooling · Security · Go · +144 stars measured 2026-10-11, 00:38–12:27 UTC, ≈ 320 by evening
   AI autonomous penetration testing system with a Go backend and Next.js frontend: agents explore assets and hunt for vulnerabilities, with traffic recording, human-in-the-loop approval, and asset sync from ScopeSentry.
   Full card: https://gitnova.dev/en/r/mhtsec/ARTEX.md
3. **jiwoochris/artex-ko** — 6.0 · Early signal · Security · Go · +116 stars measured 2026-10-11, 00:38–12:27 UTC, ≈ 207 by evening
   Korean-localized edition of ARTEX, an autonomous penetration-testing framework driven by multi-agent LLMs (Go backend + Next.js) that plans and executes attack steps on its own. Aimed at security practitioners studying and defending…
   Full card: https://gitnova.dev/en/r/jiwoochris/artex-ko.md
4. **microsoft/mxc** — 5.9 · Breakout · Security · Rust · +52 stars measured 2026-10-11, 00:38–12:27 UTC, ≈ 105 by evening
   Cross-platform sandboxed execution system for running untrusted code (model output, plugins, tools) on Windows, Linux, and macOS with configurable filesystem, network, and UI policies.
   Full card: https://gitnova.dev/en/r/microsoft/mxc.md
5. **Hinln/ARTEX** — 5.5 · Early signal · Security · Go · +41 stars measured 2026-10-11, 00:38–12:27 UTC, ≈ 104 by evening
   Autonomous AI-driven penetration testing system with a Go backend and Next.js frontend, where LLM agents explore assets, call tools and maintain a coverage map. Aimed at security specialists automating recon and testing.
   Full card: https://gitnova.dev/en/r/Hinln/ARTEX.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-11 12:38 UTC, updated every 30 minutes.