v1.7.7

What's Changed

• feat(client): add OPFOR CNA BOF scripting by @moloch-- in #2352
• Improvements to windows/shell handling by @moloch-- in #2353
• Rework reverse port forwarding lifecycle and E2E coverage by @moloch-- in #2356
• feat: harden portfwd and SOCKS5 tunnels by @moloch-- in #2359
• ci: remove 386 targets from E2E matrices by @moloch-- in #2360

Full Changelog: v1.7.6...v1.7.7

v1.7.6

What's Changed

• fix: pkgCache.Delete(value) should be pkgCache.Delete(key) by @skoveit in #2235
• Fix WG client Windows CI regressions by @moloch-- in #2236
• chore(doc): replace red-team with bf-red-team in CODEOWNERS (CLD-10806) by @grobbinsBF in #2240
• fix(implant): run LocalTask shellcode in forked child (#2237) by @Moriz82 in #2244
• fix(implant): services list panics on nil error on Windows (#1989) by @Moriz82 in #2249
• Disable wg wrapper on multiplayer by default by @moloch-- in #2250
• fix: safely close event broker subscription channels by @smeukinou in #2254
• core/events: don't panic on send to closed subscriber by @SAY-5 in #2255
• Go v1.26.2 by @moloch-- in #2257
• Duplicate HTML Fix by @cyberguerilla68 in #2259
• install: detect existing minisign before apt-get install by @SAY-5 in #2258
• Feature/configurable keepalive by @MKMithun2806 in #2273
• Fix unbounded PNG decoding by @moloch-- in #2287
• fix(dns): handle SplitBuffer varint boundaries and restore CI by @moloch-- in #2288
• fix(dns): step back on varint-boundary overshoot in SplitBuffer by @Luppa90 in #2280
• fix: set ProxyConnectHeader to prevent UA leak on proxy CONNECT by @Functionhx in #2286
• Docs: update stale SOC analyst blog post link by @ecapuano in #2293
• Add Go c-archive output format by @ph0neh0me in #2290
• Fix Dependabot security alerts by @moloch-- in #2296
• Fix remaining Dependabot advisories by @moloch-- in #2297
• docs: add go archive validation examples by @ph0neh0me in #2295
• Replace Go Report Card with golangci-lint by @moloch-- in #2298
• Bump gorm.io/gorm from 1.31.0 to 1.31.2 by @dependabot[bot] in #2301
• Bump charm.land/glamour/v2 from 2.0.0 to 2.0.1 by @dependabot[bot] in #2302
• fix(server): rotate server logs to bound disk usage by @Luppa90 in #2291
• fix(implant): bound pivot frame allocation from length prefix by @Luppa90 in #2292
• fix(server): guard Session.ToProtobuf against nil Connection by @Luppa90 in #2306
• Bump golang.org/x/text from 0.37.0 to 0.40.0 by @dependabot[bot] in #2312
• fix(implant): bound mTLS and WireGuard envelope allocation from length prefix by @Luppa90 in #2305
• docs: note the generate stager command was removed by @MKMithun2806 in #2316
• chore(deps): bump gorm.io/driver/postgres from 1.6.0 to 1.6.2 by @dependabot[bot] in #2319
• build(deps): bump dompurify from 3.4.12 to 3.4.13 in /docs/sliver-docs by @dependabot[bot] in #2317
• fix: default missing HTTPC2Header probability to 100 by @MKMithun2806 in #2318
• fix(server): prevent nil session dereference crash in tunnel/socks/pivot paths by @nkbeast in #2322
• Feat/profiles generate external builder by @MKMithun2806 in #2324
• fix(extensions): keep BOF/extension args intact without "--" by @kyzzniko-lang in #2323
• fix(alias): keep alias args intact without "--" by @kyzzniko-lang in #2326
• Use Reflektor for implant extensions by @moloch-- in #2328
• Test Sliver shared libraries with Reflektor by @moloch-- in #2332
• Docs refresh by @moloch-- in #2333
• chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.8 to 6.8.3 by @dependabot[bot] in #2303
• chore(deps): bump mermaid from 11.15.0 to 11.16.1 in /docs/sliver-docs by @dependabot[bot] in #2315
• chore(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.6 by @dependabot[bot] in #2329
• Support native extensions on macOS and Linux by @moloch-- in #2336
• fix(mcp): make mcp start usable without the interactive confirmation by @kyzzniko-lang in #2335
• test: add comprehensive server and implant E2E coverage by @moloch-- in #2339
• Use Reflektor for default BOF execution by @moloch-- in #2347
• Fix extensions rm deleting external directories by @rkervella in #2348
• Fix Armory extension updates and archive installs by @moloch-- in #2349
• Fix SGN x64 stability and strengthen shellcode E2E coverage by @moloch-- in #2350
• Make multiplayer WireGuard explicitly opt-in by @moloch-- in #2351

New Contributors

• @grobbinsBF made their first contribution in #2240
• @Moriz82 made their first contribution in #2244
• @SAY-5 made their first contribution in #2255
• @cyberguerilla68 made their first contribution in #2259
• @MKMithun2806 made their first contribution in #2273
• @Luppa90 made their first contribution in #2280
• @Functionhx made their first contribution in #2286
• @ecapuano made their first contribution in #2293
• @ph0neh0me made their first contribution in #2290
• @nkbeast made their first contribution in #2322
• @kyzzniko-lang made their first contribution in #2323

Full Changelog: v1.7.5...v1.7.6

v1.7.3

Revert wasm-donut to v0.0.3 to fix regression in Windows shellcode generation.

Full Changelog: v1.7.2...v1.7.3

v1.7.2

Change Log

• Improvements to shell you can now manage multiple shells and swap between them
  • Use ctrl+] to background an interactive shell
  • Use shell ls to list shells
  • Use shell attach to re-attach to a shell
• Implemented Windows PE metadata spoofing (thanks @skoveit )
• Added local file tab completion for most commands/flags
• Several bug fixes and security improvements (thanks @xtle0o0 @Aptimex @skoveit )
• Improvements to MacOS shellcode loader (thanks @kyleavery )

Commits

• fix: wait system shell to cleanup zombie processes by @loresuso in #2171
• Fix: server panic on single-word lists and off-by-one in codename generation by @skoveit in #2172
• fix-export-ca-error-message by @skoveit in #2176
• Restrict external builder RPCs to assigned build jobs by @xtle0o0 in #2170
• Skoveit feature/dynamic c2 endpoint by @moloch-- in #2177
• Feature/Shell Management by @moloch-- in #2180
• Add limit to gzip size by @moloch-- in #2181
• Fix: Execute default env inheritance issues by @Aptimex in #2187
• Fix 'websites rm' add tab completer issue #2185 by @moloch-- in #2188
• Jjensn fix/yamux disable logging by @moloch-- in #2189
• Skoveit feature/pe metadata spoofing by @moloch-- in #2190
• Feature/file tab completer by @moloch-- in #2191

New Contributors

• @loresuso made their first contribution in #2171
• @skoveit made their first contribution in #2172
• @xtle0o0 made their first contribution in #2170
• @Aptimex made their first contribution in #2187

Full Changelog: v1.7.1...v1.7.2

v1.7.1

What's Changed

• Linux/shellcode by @moloch-- in #2166
• Feature/mutli console by @moloch-- in #2168

Full Changelog: v1.7.0...v1.7.1

v1.7.0

What's Changed

• C2/mux by @moloch-- in #2161
• Darwin/arm64 Shellcode by @moloch-- in #2162
• Feature/exec bg by @moloch-- in #2163
• Fix/dns dos by @moloch-- in #2164
• Update gRPC APIs by @moloch-- in #2165

Full Changelog: v1.6.11...v1.7.0

v1.6.11

What's Changed

• Ensure armory temp files cross‑plat by @moloch-- in #2156
• Use lport from server config in daemon mode / fix #2129 by @JakubStanior in #2159
• Fix shell pty resizing by @moloch-- in #2158
• Use correct path construction in website.ToProtobuf() by @moloch-- in #2160

New Contributors

• @JakubStanior made their first contribution in #2159

Full Changelog: v1.6.10...v1.6.11

v1.6.10

What's Changed

• Fix/info by @moloch-- in #2148
• SOCKS5 Stability Improvements for HTTP/mTLS Transports by @navsec in #1807
• Expand time formats supported by chtimes by @moloch-- in #2150
• Feature/xxd by @moloch-- in #2151
• Feature/shellcode encoders by @moloch-- in #2152
• Go/v1.25.6 by @moloch-- in #2154
• WASM Donut by @moloch-- in #2153

New Contributors

• @navsec made their first contribution in #1807

Full Changelog: v1.6.9...v1.6.10

v1.6.9

What's Changed

• Feature/certs db by @moloch-- in #2147
• Added edit command
• Added notifications feature

Full Changelog: v1.6.8...v1.6.9

v1.6.8

What's Changed

• Fix/sgn by @moloch-- in #2142
• Fix/update by @moloch-- in #2144
• Fix/websites css by @moloch-- in #2146
• Feature/configs yml by @moloch-- in #2145

Full Changelog: v1.6.7...v1.6.8