sliver/implant/sliver/netstat at
58a56a077f0813bb312f9fa4df7453b510c3a73b · BishopFox/sliver
By moloch--
Archived: 2026-04-05 14:10:35 UTC
A modified version of https://github.com/cakturk/go-netstat, modifications have been made for interoperability
with the rest of Sliver:
Added Darwin support
Data structures have been ported to protobuf
Using as a library
Godoc
Getting the package
$ go get github.com/cakturk/go-netstat/netstat
import (
"fmt"
"github.com/cakturk/go-netstat/netstat"
)
func displaySocks() error {
// UDP sockets
socks, err := netstat.UDPSocks(netstat.NoopFilter)
if err != nil {
return err
}
for _, e := range socks {
fmt.Printf("%v\n", e)
}
// TCP sockets
socks, err = netstat.TCPSocks(netstat.NoopFilter)
if err != nil {
return err
}
for _, e := range socks {
https://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat
Page 1 of 2

fmt.Printf("%v\n", e)
}
// get only listening TCP sockets
tabs, err = netstat.TCPSocks(func(s *netstat.SockTabEntry) bool {
return s.State == netstat.Listen
})
if err != nil {
return err
}
for _, e := range socks {
fmt.Printf("%v\n", e)
}
// list all the TCP sockets in state FIN_WAIT_1 for your HTTP server
tabs, err = netstat.TCPSocks(func(s *netstat.SockTabEntry) bool {
return s.State == netstat.FinWait1 && s.LocalAddr.Port == 80
})
// error handling, etc.
return nil
}
Source: https://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat
https://github.com/BishopFox/sliver/tree/58a56a077f0813bb312f9fa4df7453b510c3a73b/implant/sliver/netstat
Page 2 of 2