One Day Sec

What is Donut and how does it enhance the stealth and extensibility of execute-assembly?

Donut is a shellcode generation tool that converts .NET assemblies into position-independent shellcode. Unlike execute-assembly, which injects DLLs via reflection, Donut eliminates the DLL footprint by generating raw shellcode that can be injected into any process. This makes it more stealthy (no PE artifacts) and more extensible—any method capable of executing shellcode (e.g., via `CreateRemoteThread`) can use Donut, and it simplifies secondary development. For details, see the Shellcode Generation Tool Donut Testing and Analysis article.
Donutexecute-assemblyshellcode.NET assemblyshellcode injectionstealthCLR

Browse all Q&A →