Donut Github

Donut can generate packed code modules.

Donut can generate encrypted, compressed/encoded, or otherwise obfuscated code modules.

Donut can generate encrypted, compressed/encoded, or otherwise obfuscated code modules.

Donut includes a subproject DonutTest to inject shellcode into a target process.

Donut includes subprojects that enumerate and identify information about Process Injection candidates.

Donut can generate shellcode outputs that execute via Ruby.

Donut can generate shellcode outputs that execute via PowerShell.

Donut can generate shellcode outputs that execute via VBScript.

Donut can generate shellcode outputs that execute via Python.

Donut can generate shellcode outputs that execute via JavaScript or JScript.

Donut can erase file references to payloads in-memory after being reflectively loaded and executed.

Donut can use HTTP to download previously staged shellcode payloads.

Donut can download and execute previously staged shellcode payloads.

Donut code modules use various API functions to load and inject code.

Donut can generate code modules that enable in-memory execution of VBScript, JScript, EXE, DLL, and dotNET payloads.

Donut can patch Antimalware Scan Interface (AMSI), Windows Lockdown Policy (WLDP), as well as exit-related Native API functions to avoid process termination.