Skip to content
byt3bl33d3r edited this page Aug 14, 2019 · 6 revisions

SILENTTRINITY is a modern, asynchronous, multiplayer & multiserver C2/post-exploitation framework. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a technique the author coined as BYOI (Bring Your Own Interpreter). The aim of this tool and the BYOI concept is to shift the paradigm back to PowerShell style like attacks (as it offers much more flexibility over traditional C# tradecraft) only without using PowerShell in anyway.

ST has numerous features that makes it stand out from other C2 frameworks, if I had to give you just 4 (for a complete list see the README):

  • Collaborative - you can share shells between multiple users and control multiple teamservers from a single client.
  • Fully Modular - Modules, Listeners, Stagers etc.. are completely modular and designed to be easily extended.
  • Modern CLI Interface - Tab completion plus a lot of bells and whistles that make it look like an actual CLI from the 21st century.
  • Dynamic Evaluation/Compilation Using .NET Scripting Languages - The SILENTTRINITY implant Naga, is somewhat unique as it uses embedded third-party .NET scripting languages (e.g. Boolang) to dynamically compile/evaluate tasks, this removes the need to compile tasks server side, allows for real-time editing of modules, provides greater flexibilty and stealth over traditional C# based payloads and makes everything much more light-weight.

The primary author and maintainer of SILENTTRINITY is Marcello Salvati (@byt3bl33d3r)

ST