QUESTION. How to run BOF Files with Coff-loader. about sliver HOT 1 CLOSED

is there a way to load .o extensions directly using coff-loader, or if I need to import the extension using extensions.json, how can I do it?

Yes, but it's tedious. coff-loader being an extension itself, it expects arguments being passed in a certain way. The arguments are packed using the same argument parser than the BOFs use (see here). These arguments are (in order):

• the name of the export to call in the COFF file
• the COFF file data itself
• the packed arguments for the BOF

As I said, this is tedious, hence why the sliver-client does that for you when you register a new extension. The coff-loader command in the client was never intended to be used directly, and afaik, there's no way to make it work properly due to how you need to pass arguments to it (I'll probably mask it in v1.6).

Now, what you want to do is to add your custom extension. To do so, you can either use extension load and extension install, or just drop your extension files in a new folder in ~/.sliver-client/extensions/YOUR_EXTENSION_NAME. Be mindful that the YOUR_EXTENSION_NAME needs to match the command name in the manifest file (extension.json). So in your case, it should be named etw-test.

from sliver.