{
	"id": "66c15d79-27e7-4d3c-99a2-8e178d7fca0d",
	"created_at": "2026-04-06T00:15:52.438201Z",
	"updated_at": "2026-04-10T13:12:16.31702Z",
	"deleted_at": null,
	"sha1_hash": "8745cd64dbb344b4642e67c62647a2e91a369b36",
	"title": "sliver/implant/sliver/netstat at 58a56a077f0813bb312f9fa4df7453b510c3a73b · BishopFox/sliver",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 42656,
	"plain_text": "sliver/implant/sliver/netstat at\r\n58a56a077f0813bb312f9fa4df7453b510c3a73b · BishopFox/sliver\r\nBy moloch--\r\nArchived: 2026-04-05 14:10:35 UTC\r\nA modified version of https://github.com/cakturk/go-netstat, modifications have been made for interoperability\r\nwith the rest of Sliver:\r\nAdded Darwin support\r\nData structures have been ported to protobuf\r\nUsing as a library\r\nGodoc\r\nGetting the package\r\n$ go get github.com/cakturk/go-netstat/netstat\r\nimport (\r\n\"fmt\"\r\n\"github.com/cakturk/go-netstat/netstat\"\r\n)\r\nfunc displaySocks() error {\r\n// UDP sockets\r\nsocks, err := netstat.UDPSocks(netstat.NoopFilter)\r\nif err != nil {\r\nreturn err\r\n}\r\nfor _, e := range socks {\r\nfmt.Printf(\"%v\\n\", e)\r\n}\r\n// TCP sockets\r\nsocks, err = netstat.TCPSocks(netstat.NoopFilter)\r\nif err != nil {\r\nreturn err\r\n}\r\nfor _, e := range socks {\r\nhttps://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat\r\nPage 1 of 2\n\nfmt.Printf(\"%v\\n\", e)\r\n}\r\n// get only listening TCP sockets\r\ntabs, err = netstat.TCPSocks(func(s *netstat.SockTabEntry) bool {\r\nreturn s.State == netstat.Listen\r\n})\r\nif err != nil {\r\nreturn err\r\n}\r\nfor _, e := range socks {\r\nfmt.Printf(\"%v\\n\", e)\r\n}\r\n// list all the TCP sockets in state FIN_WAIT_1 for your HTTP server\r\ntabs, err = netstat.TCPSocks(func(s *netstat.SockTabEntry) bool {\r\nreturn s.State == netstat.FinWait1 \u0026\u0026 s.LocalAddr.Port == 80\r\n})\r\n// error handling, etc.\r\nreturn nil\r\n}\r\nSource: https://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat\r\nhttps://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat"
	],
	"report_names": [
		"netstat"
	],
	"threat_actors": [],
	"ts_created_at": 1775434552,
	"ts_updated_at": 1775826736,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/8745cd64dbb344b4642e67c62647a2e91a369b36.pdf",
		"text": "https://archive.orkl.eu/8745cd64dbb344b4642e67c62647a2e91a369b36.txt",
		"img": "https://archive.orkl.eu/8745cd64dbb344b4642e67c62647a2e91a369b36.jpg"
	}
}