{ "id": "242fb1f6-f132-4d0f-b8b1-5fc160e4564d", "created_at": "2026-04-06T01:32:32.702538Z", "updated_at": "2026-04-10T03:22:07.263359Z", "deleted_at": null, "sha1_hash": "816fe13cd0c3fcbcfbf239a894d90da304e018ff", "title": "GitHub - byt3bl33d3r/SILENTTRINITY: An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 225056, "plain_text": "GitHub - byt3bl33d3r/SILENTTRINITY: An asynchronous,\r\ncollaborative post-exploitation agent powered by Python and\r\n.NET's DLR\r\nBy byt3bl33d3r\r\nArchived: 2026-04-06 01:12:25 UTC\r\nSILENTTRINITY is modern, asynchronous, multiplayer \u0026 multiserver C2/post-exploitation framework powered\r\nby Python 3 and .NETs DLR. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a technique the author coined as BYOI (Bring\r\nYour Own Interpreter). The aim of this tool and the BYOI concept is to shift the paradigm back to PowerShell\r\nstyle like attacks (as it offers much more flexibility over traditional C# tradecraft) only without using PowerShell\r\nin anyway.\r\nSome of the main features that distinguish SILENTTRINITY are:\r\nMulti-User \u0026 Multi-Server - Supports multi-user collaboration. Additionally, the client can connect to\r\nand control multiple Teamservers.\r\nhttps://github.com/byt3bl33d3r/SILENTTRINITY\r\nPage 1 of 3\n\nClient and Teamserver Built in Python 3.7 - Latest and greatest features of the Python language are used,\r\nheavy use of Asyncio provides ludicrous speeds.\r\nReal-time Updates and Communication - Use of Websockets allow for real-time communication and\r\nupdates between the Client and Teamserver.\r\nFocus on Usability with an Extremely Modern CLI - Powered by prompt-toolkit.\r\nDynamic Evaluation/Compilation Using .NET Scripting Languages - The SILENTTRINITY implant\r\nNaga, is somewhat unique as it uses embedded third-party .NET scripting languages (e.g. Boolang) to\r\ndynamically compile/evaluate tasks, this removes the need to compile tasks server side, allows for real-time editing of modules, provides greater flexibilty and stealth over traditional C# based payloads and\r\nmakes everything much more light-weight.\r\nECDHE Encrypted C2 Communication - SILENTTRINITY uses Ephemeral Elliptic Curve Diffie-Hellman Key Exchange to encrypt all C2 traffic between the Teamserver and its implant.\r\nFully Modular - Listeners, Modules, Stagers and C2 Channels are fully modular allowing operators to\r\neasily build their own.\r\nExtensive logging - Every action is logged to a file.\r\nFuture proof - HTTPS/HTTP listeners are built on Quart \u0026 Hypercorn which also support HTTP2 \u0026\r\nWebsockets.\r\nCall for Contributions\r\nI'm just one person developing this mostly in my spare time, I do need to have a life outside of computers (radical\r\nidea, I know).\r\nThis means that if anyone finds this tool useful and would like to see X functionality added, the best way to get it\r\nadded is to submit a Pull Request.\r\nBe the change you want to see in the world!\r\nAs of the time of writing the most useful thing you can contribute are post-ex modules: this would allow me to\r\nconcentrate efforts on the framework itself, user experience, QOL features etc...\r\nTo do this, you're going to have to learn the Boo programming language (the Boo wiki is amazing and has\r\neverything you'd need to get started), if you know Python you'll find yourself at home :).\r\nCheck out some of the existing modules, if you've written an Empire module before you'll see its very similar.\r\nFinally you can start porting over post-ex modules from other C2 frameworks such as Empire.\r\nDocumentation, Setup \u0026 Basic Usage\r\nThe documentation is a work in progress but some is already available in the Wiki.\r\nSee here for install instructions and here for basic usage.\r\nI recommend making wild use the help command and the -h flag :)\r\nAuthor\r\nhttps://github.com/byt3bl33d3r/SILENTTRINITY\r\nPage 2 of 3\n\nMarcello Salvati (@byt3bl33d3r)\r\nAcknowledgments, Contributors \u0026 Involuntary Contributors\r\n(In no particular order)\r\n@devinmadewell for some awesome modules.\r\n@RemiEscourrou for some awesome modules.\r\n@nicolas_dbresse a.k.a @Daudau for contributing an insane amount of modules.\r\n@C_Sto for helping me with some of the .NET ECDHE implementation details and keeping my sanity.\r\n@davidtavarez for making some amazing contributions including a cross-platform stager.\r\n@mcohmi a.k.a daddycocoaman, for being awesome and making code contributions including modules.\r\n@SkelSec for the amazing work on Pypykatz and for being a general inspiration.\r\n@cobbr_io for writing SharpSploit which was heavily used as a reference throughout building a lot of the\r\nimplant code \u0026 modules.\r\n@harmj0y for writing SeatBelt which I stole (won't be the least thing I'll steal from him either!) and ported\r\nover to Boolang and for being a general inspiration.\r\n@TheWover \u0026 Odzhan for writing Donut which SILENTTRINITY makes heavy use of.\r\nmodexp for helping me with a bunch of low level windows stuff which one day I'll learn when I decide to\r\ngrow up.\r\n@xpn for making an AMSI Patch which I stole and for being a general inspiration.\r\n@_RastaMouse for making an AMSI Patch which I stole and for being a general inspiration.\r\n@r3dQu1nn for writing his awesome AggressorScripts, decent amount of SILENTTRINITY modules are\r\nbased off of those scripts.\r\n@matterpreter for stealing a bunch of stuff from his OffensiveCSharp repository.\r\n@hackabean for some awesome modules.\r\nSource: https://github.com/byt3bl33d3r/SILENTTRINITY\r\nhttps://github.com/byt3bl33d3r/SILENTTRINITY\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "MITRE" ], "references": [ "https://github.com/byt3bl33d3r/SILENTTRINITY" ], "report_names": [ "SILENTTRINITY" ], "threat_actors": [], "ts_created_at": 1775439152, "ts_updated_at": 1775791327, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/816fe13cd0c3fcbcfbf239a894d90da304e018ff.pdf", "text": "https://archive.orkl.eu/816fe13cd0c3fcbcfbf239a894d90da304e018ff.txt", "img": "https://archive.orkl.eu/816fe13cd0c3fcbcfbf239a894d90da304e018ff.jpg" } }