package commonpb

Get desktop application:
View/edit binary Protocol Buffers messages

Used as request type in: rpcpb.SliverRPC.Builders, rpcpb.SliverRPC.Canaries, rpcpb.SliverRPC.Crackstations, rpcpb.SliverRPC.Creds, rpcpb.SliverRPC.Events, rpcpb.SliverRPC.GenerateUniqueIP, rpcpb.SliverRPC.GenerateWGClientConfig, rpcpb.SliverRPC.GetBeacons, rpcpb.SliverRPC.GetCompiler, rpcpb.SliverRPC.GetHTTPC2Profiles, rpcpb.SliverRPC.GetJobs, rpcpb.SliverRPC.GetOperators, rpcpb.SliverRPC.GetSessions, rpcpb.SliverRPC.GetVersion, rpcpb.SliverRPC.Hosts, rpcpb.SliverRPC.ImplantBuilds, rpcpb.SliverRPC.ImplantProfiles, rpcpb.SliverRPC.LootAll, rpcpb.SliverRPC.MonitorListConfig, rpcpb.SliverRPC.MonitorStart, rpcpb.SliverRPC.MonitorStop, rpcpb.SliverRPC.PivotGraph, rpcpb.SliverRPC.ShellcodeEncoderMap, rpcpb.SliverRPC.TrafficEncoderMap, rpcpb.SliverRPC.Websites

Used as response type in: rpcpb.SliverRPC.BuilderTrigger, rpcpb.SliverRPC.ClientLog, rpcpb.SliverRPC.CloseSession, rpcpb.SliverRPC.CloseSocks, rpcpb.SliverRPC.CloseTunnel, rpcpb.SliverRPC.CrackFileChunkUpload, rpcpb.SliverRPC.CrackFileComplete, rpcpb.SliverRPC.CrackFileDelete, rpcpb.SliverRPC.CrackTaskUpdate, rpcpb.SliverRPC.CrackstationBenchmark, rpcpb.SliverRPC.CrackstationTrigger, rpcpb.SliverRPC.CredsAdd, rpcpb.SliverRPC.CredsRm, rpcpb.SliverRPC.CredsUpdate, rpcpb.SliverRPC.DeleteImplantBuild, rpcpb.SliverRPC.DeleteImplantProfile, rpcpb.SliverRPC.GenerateExternalSaveBuild, rpcpb.SliverRPC.HostIOCRm, rpcpb.SliverRPC.HostRm, rpcpb.SliverRPC.Kill, rpcpb.SliverRPC.LootRm, rpcpb.SliverRPC.MonitorStop, rpcpb.SliverRPC.PivotStopListener, rpcpb.SliverRPC.Rename, rpcpb.SliverRPC.RestartJobs, rpcpb.SliverRPC.RmBeacon, rpcpb.SliverRPC.SaveHTTPC2Profile, rpcpb.SliverRPC.StageImplantBuild, rpcpb.SliverRPC.TrafficEncoderRm, rpcpb.SliverRPC.UpdateBeaconIntegrityInformation, rpcpb.SliverRPC.WebsiteRemove

(message has no fields)

EnvVar - Environment variable K/V

Used in: sliverpb.EnvInfo, sliverpb.SetEnvReq

• string Key = 1

• string Value = 2

File - A basic file data type

Used in: clientpb.ExternalImplantBinary, clientpb.Generate, clientpb.ImplantConfig, clientpb.Loot, clientpb.TrafficEncoder

• string Name = 1

• bytes Data = 2

Process - A basic process data type

Used in: sliverpb.Ps, sliverpb.SockTabEntry

• int32 Pid = 1

• int32 Ppid = 2

• string Executable = 3

• string Owner = 4

• string Architecture = 7

• int32 SessionID = 5

• repeated string CmdLine = 6

Request - Common fields used in all gRPC requests

Used in: clientpb.BackdoorReq, clientpb.CloseTunnelReq, clientpb.CreateTunnelReq, clientpb.DllHijackReq, clientpb.GetSystemReq, clientpb.MSFRemoteReq, clientpb.MSFReq, clientpb.MigrateReq, clientpb.NamedPipesReq, clientpb.ShellcodeEncodeReq, clientpb.TCPPivotReq, sliverpb.CallExtensionReq, sliverpb.CdReq, sliverpb.ChmodReq, sliverpb.ChownReq, sliverpb.ChtimesReq, sliverpb.CloseSession, sliverpb.CpReq, sliverpb.CurrentTokenOwnerReq, sliverpb.DeregisterWasmExtensionReq, sliverpb.DownloadReq, sliverpb.EnvReq, sliverpb.ExecWasmExtensionReq, sliverpb.ExecuteAssemblyReq, sliverpb.ExecuteReq, sliverpb.ExecuteWindowsReq, sliverpb.GetPrivsReq, sliverpb.GrepReq, sliverpb.IfconfigReq, sliverpb.ImpersonateReq, sliverpb.InvokeExecuteAssemblyReq, sliverpb.InvokeGetSystemReq, sliverpb.InvokeInProcExecuteAssemblyReq, sliverpb.InvokeMigrateReq, sliverpb.InvokeSpawnDllReq, sliverpb.KillReq, sliverpb.ListExtensionsReq, sliverpb.ListWasmExtensionsReq, sliverpb.LsReq, sliverpb.MakeTokenReq, sliverpb.MemfilesAddReq, sliverpb.MemfilesListReq, sliverpb.MemfilesRmReq, sliverpb.MkdirReq, sliverpb.MountReq, sliverpb.MvReq, sliverpb.NetstatReq, sliverpb.OpenSession, sliverpb.Ping, sliverpb.PivotListenersReq, sliverpb.PivotStartListenerReq, sliverpb.PivotStopListenerReq, sliverpb.PollIntervalReq, sliverpb.PortfwdReq, sliverpb.ProcessDumpReq, sliverpb.PsReq, sliverpb.PwdReq, sliverpb.RPortfwdReq, sliverpb.ReconfigureReq, sliverpb.RegisterExtensionReq, sliverpb.RegisterWasmExtensionReq, sliverpb.RegistryCreateKeyReq, sliverpb.RegistryDeleteKeyReq, sliverpb.RegistryListValuesReq, sliverpb.RegistryReadHiveReq, sliverpb.RegistryReadReq, sliverpb.RegistrySubKeyListReq, sliverpb.RegistryWriteReq, sliverpb.RemoveServiceReq, sliverpb.RevToSelfReq, sliverpb.RmReq, sliverpb.RportFwdListenersReq, sliverpb.RportFwdStartListenerReq, sliverpb.RportFwdStopListenerReq, sliverpb.RunAsReq, sliverpb.SSHCommandReq, sliverpb.ScreenshotReq, sliverpb.ServiceDetailReq, sliverpb.ServicesReq, sliverpb.SetEnvReq, sliverpb.ShellReq, sliverpb.SideloadReq, sliverpb.SocksData, sliverpb.SpawnDllReq, sliverpb.StartServiceByNameReq, sliverpb.StartServiceReq, sliverpb.StopServiceReq, sliverpb.TaskReq, sliverpb.TerminateReq, sliverpb.UnsetEnvReq, sliverpb.UploadReq, sliverpb.WGPortForwardStartReq, sliverpb.WGPortForwardStopReq, sliverpb.WGSocksServersReq, sliverpb.WGSocksStartReq, sliverpb.WGSocksStopReq, sliverpb.WGTCPForwardersReq

• bool Async = 1

• int64 Timeout = 2

• string BeaconID = 8

• string SessionID = 9

Response - Common fields used in all gRPC responses. Note that the Err field only used when the implant needs to return an error to the server. Client<->Server comms should use normal gRPC error handling.

Used as response type in: rpcpb.SliverRPC.MonitorAddConfig, rpcpb.SliverRPC.MonitorDelConfig, rpcpb.SliverRPC.MonitorStart

Used as field type in: clientpb.Backdoor, clientpb.DllHijack, clientpb.NamedPipes, clientpb.ShellcodeEncode, clientpb.TCPPivot, sliverpb.CallExtension, sliverpb.Chmod, sliverpb.Chown, sliverpb.Chtimes, sliverpb.CloseSession, sliverpb.Cp, sliverpb.CurrentTokenOwner, sliverpb.Download, sliverpb.EnvInfo, sliverpb.ExecWasmExtension, sliverpb.Execute, sliverpb.ExecuteAssembly, sliverpb.GetPrivs, sliverpb.GetSystem, sliverpb.Grep, sliverpb.Ifconfig, sliverpb.Impersonate, sliverpb.ListExtensions, sliverpb.ListWasmExtensions, sliverpb.Ls, sliverpb.MakeToken, sliverpb.MemfilesAdd, sliverpb.MemfilesRm, sliverpb.Migrate, sliverpb.Mkdir, sliverpb.Mount, sliverpb.Mv, sliverpb.Netstat, sliverpb.OpenSession, sliverpb.Ping, sliverpb.PivotListener, sliverpb.PivotListeners, sliverpb.PollInterval, sliverpb.Portfwd, sliverpb.ProcessDump, sliverpb.Ps, sliverpb.Pwd, sliverpb.RPortfwd, sliverpb.Reconfigure, sliverpb.RegisterExtension, sliverpb.RegisterWasmExtension, sliverpb.RegistryCreateKey, sliverpb.RegistryDeleteKey, sliverpb.RegistryRead, sliverpb.RegistryReadHive, sliverpb.RegistrySubKeyList, sliverpb.RegistryValuesList, sliverpb.RegistryWrite, sliverpb.RevToSelf, sliverpb.Rm, sliverpb.RportFwdListener, sliverpb.RportFwdListeners, sliverpb.RunAs, sliverpb.SSHCommand, sliverpb.Screenshot, sliverpb.ServiceDetail, sliverpb.ServiceInfo, sliverpb.Services, sliverpb.SetEnv, sliverpb.Shell, sliverpb.Sideload, sliverpb.SpawnDll, sliverpb.Task, sliverpb.Terminate, sliverpb.UnsetEnv, sliverpb.Upload, sliverpb.WGPortForward, sliverpb.WGSocks, sliverpb.WGSocksServers, sliverpb.WGTCPForwarders

• string Err = 1

• bool Async = 2

• string BeaconID = 8

• string TaskID = 9