nopowershell icon indicating copy to clipboard operation
nopowershell copied to clipboard

How can i run this one with SliverC2?

Open chilumine opened this issue 5 months ago • 3 comments

chilumine avatar Sep 16 '25 16:09 chilumine

Hi Chí, I have not used the Sliver C2 framework before, but it seems there are options to run .NET assemblies using either execute-assembly or inline-execute-assembly[1]. Have you tried those?

[1] https://sliver.sh/docs?name=Third%20Party%20Tools

bitsadmin avatar Sep 16 '25 20:09 bitsadmin

Yes, already tried those but still want to know about posibility to use Nopowershell along with SliverC2

chilumine avatar Sep 17 '25 03:09 chilumine

What do you mean with "along with"?

Sliver C2, like many other C2 frameworks, will load the NoPowerShell.exe binary from your local disk into the memory of the system running the Sliver C2 implant and invoke it with the parameters you provided. Then NoPowerShell will perform its activities and the output (stdout/stderr) will be returned back to Sliver C2 and shown in the output of the Sliver C2 client.

bitsadmin avatar Sep 17 '25 19:09 bitsadmin