Loading...

A shellcode generator that creates position-independent code for loading and executing .NET Assemblies, PE files, and Windows payloads from memory.

A shellcode generator that creates position-independent code for loading and executing .NET Assemblies, PE files, and Windows payloads from memory.
Donut is a position-independent shellcode generator that creates x86, x64, or AMD64+x86 shellcode for loading and executing various Windows payloads from memory. The tool supports multiple payload types including .NET Assemblies, PE files, and other Windows executables. It generates shellcode that can load these payloads directly from memory without requiring them to be written to disk. The generated shellcode is position-independent, meaning it can execute from any memory location without requiring specific memory addresses. This characteristic makes it suitable for various exploitation scenarios where memory layout may be unpredictable. Donut allows users to pass parameters to the loaded payloads, providing flexibility in how the executed code receives input. The tool supports multiple processor architectures, enabling compatibility across different Windows systems. The shellcode generation process converts standard executable files into a format that can be injected and executed within existing processes, making it useful for post-exploitation activities and payload delivery mechanisms.
Common questions about Donut including features, pricing, alternatives, and user reviews.
Donut is A shellcode generator that creates position-independent code for loading and executing .NET Assemblies, PE files, and Windows payloads from memory.. It is a Security Operations solution designed to help security teams with Pe File, Shellcode, Windows.
TikiTorch is a process injection tool that executes code within the address space of other processes using various injection techniques.
Get strategic cybersecurity insights in your inbox
PowerSploit is a PowerShell-based penetration testing framework containing modules for code execution, injection techniques, persistence, and various offensive security operations.
A Linux process injection tool that uses ptrace() to inject assembly-based shellcode into running processes without NULL byte restrictions.
A proof-of-concept executable injection tool that compiles and launches parasitic executables within target processes using standard or stealth injection techniques.
A tool that generates .NET serialized gadgets for triggering assembly load and execution through BinaryFormatter deserialization in JavaScript, VBScript, and VBA scripts.