Skip to content

Recompiling Stagers

byt3bl33d3r edited this page Sep 7, 2019 · 6 revisions

Recompiling Stagers

Eventually the default ST stager (a .NET assembly) that's present in the repository is gonna get flagged by some AV/EDR product, usually the easiest way to get around this is just to recompile it and replace naga.exe in the teamserver/data directory with the newly compiled version. It will then automatically get picked up by the various stagers, encoded & compressed on runtime.

  1. Download Visual Studio and Naga (the SILENTTRINITY C# stager)
  2. Open the Naga Visual Studio solution file
  3. Compile it, it will generate naga.exe
  4. Replace the old naga.exe in the teamserver/data directory with the newly compiled one