Packages and Binaries:

golang-github-binject-go-donut

This package contains the Donut Injector ported to pure Go. This package provides the binary file go-donut generated by github-binject-go-donut.

Installed size: 4.76 MB
How to install: sudo apt install golang-github-binject-go-donut

go-donut

root@kali:~# go-donut -h
usage: go-donut [-h|--help] [-n|--module "<value>"] [-u|--url "<value>"]
                [-e|--entropy <integer>] [-a|--arch "<value>"] [-b|--bypass
                <integer>] [-o|--out "<value>"] [-f|--format <integer>]
                [-y|--oep "<value>"] [-x|--exit <integer>] [-c|--class
                "<value>"] [-d|--domain "<value>"] [-m|--method "<value>"]
                [-p|--params "<value>"] [-w|--unicode] [-r|--runtime "<value>"]
                [-t|--thread] [-z|--compress <integer>] -i|--in "<value>"
                [-v|--verbose]

                Convert a VBS/JS or PE/.NET EXE/DLL to shellcode.
		Only the finest artisanal donuts are made of shells.

Arguments:

  -h  --help      Print help information
  -n  --module    Module name. Randomly generated by default with entropy
                  enabled.
  -u  --url       HTTP server that will host the donut module.
  -e  --entropy   Entropy. 1=disable, 2=use random names, 3=random names +
                  symmetric encryption (default). Default: 3
  -a  --arch      Target Architecture: x32, x64, or x84. Default: x84
  -b  --bypass    Bypass AMSI/WLDP : 1=skip, 2=abort on fail, 3=continue on
                  fail.. Default: 3
  -o  --out       Output file.. Default: loader.bin
  -f  --format    Output format. 1=raw, 2=base64, 3=c, 4=ruby, 5=python,
                  6=powershell, 7=C#, 8=hex. Default: 1
  -y  --oep       Create a new thread for loader. Optionally execute original
                  entrypoint of host process.
  -x  --exit      Exiting. 1=exit thread, 2=exit process. Default: 1
  -c  --class     Optional class name.  (required for .NET DLL)
  -d  --domain    AppDomain name to create for .NET.  Randomly generated by
                  default with entropy enabled.
  -m  --method    Optional method or API name for DLL. (a method is required
                  for .NET DLL)
  -p  --params    Optional parameters/command line inside quotations for DLL
                  method/function or EXE.
  -w  --unicode   Command line is passed to unmanaged DLL function in UNICODE
                  format. (default is ANSI)
  -r  --runtime   CLR runtime version. This will override the auto-detected
                  version.
  -t  --thread    Create new thread for entrypoint of unmanaged EXE.
  -z  --compress  Pack/Compress file. 1=disable, 2=LZNT1, 3=Xpress, 4=Xpress
                  Huffman. Default: 1
  -i  --in        .NET assembly, EXE, DLL, VBS, JS or XSL file to execute
                  in-memory.
  -v  --verbose   Show verbose output.

golang-github-binject-go-donut-dev

This package contains the Donut Injector ported to pure Go. This package provides Go source code.

Installed size: 182 KB
How to install: sudo apt install golang-github-binject-go-donut-dev