--- title: "Enter the WasmForge: Compiling Sliver into WebAssembly" url: https://daily.dev/posts/enter-the-wasmforge-compiling-sliver-into-webassembly-qyhkqzobi source_url: https://securityboulevard.com/2026/06/enter-the-wasmforge-compiling-sliver-into-webassembly type: article source: "Security Boulevard" published: 2026-06-03T17:13:39.884Z updated: 2026-06-03T17:14:13.493Z tags: ["golang", "webassembly", "offensive-security"] reading_time: 17 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Enter the WasmForge: Compiling Sliver into WebAssembly **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 17 min read · 1 upvotes · 0 comments ## Summary WasmForge is a build wrapper that compiles existing Go-based offensive security tools (like Sliver, Chisel, and Mythic implants) into WebAssembly without modifying their source code, producing binaries that evade EDR static analysis. The system works in three stages: patching Go's stdlib for WASI compatibility, compiling to a .wasm module, and wrapping it in a custom Wazero runtime with ~80 host shim functions bridging WASI gaps for Win32 and macOS APIs. Evasion techniques include per-build randomized WASM opcode tables, custom magic bytes, harvested symbol tables from real Go projects ('ghost profiles'), and randomized PE metadata and signing identities. The tool was validated by running Sliver, Chisel, gogokatz, and goffloader on real engagements against hardened Windows and macOS endpoints. WasmForge will be open-sourced alongside a forthcoming post on compiling .NET/C# GhostPack tools to WASM via NativeAOT-LLVM. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [a WebAssembly Toolkit for Go](https://daily.dev/posts/a-webassembly-toolkit-for-go-nf6sv2pka) · Eli Bendersky · 29 upvotes · 0 comments - [GlassWASM: WebAssembly Malware Found in Trojanized Open VSX ...](https://daily.dev/posts/glasswasm-webassembly-malware-found-in-trojanized-open-vsx--kjdlx357b) · Socket · 0 upvotes · 0 comments - [ShellForge: Building a Constraint-Aware Shellcode Generator from Scratch](https://daily.dev/posts/shellforge-building-a-constraint-aware-shellcode-generator-from-scratch-4j6jx3l6u) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#golang](https://daily.dev/tags/golang), [#webassembly](https://daily.dev/tags/webassembly), [#offensive-security](https://daily.dev/tags/offensive-security) [View this post on daily.dev](https://daily.dev/posts/enter-the-wasmforge-compiling-sliver-into-webassembly-qyhkqzobi)