TheWover/donut

Health v2 · maintenance only

Adoption not part of the score

4689 stars · 755 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Donut is a shellcode generator that converts VBScript, JScript, EXE, DLL files, and .NET assemblies into x86, x64, or AMD64+x86 position-independent code for in-memory execution on Windows. Payloads can be staged over HTTP or embedded in the loader, with optional Chaskey encryption, compression, and AMSI/WLDP/ETW patching.

Use cases

• generate shellcode from a .NET assembly for in-memory execution
• convert an EXE or DLL into position-independent code
• run a script payload entirely from memory without touching disk
• encrypt and compress a payload for a red team engagement
• embed a payload directly into a loader stub
• bypass AMSI and WLDP when executing managed payloads

When to choose

• you need to execute Windows payloads from memory as shellcode
• you are doing authorized penetration testing or red team research
• you need a mature, well-documented PIC generator with encryption and staging options

When to avoid

• you need a defensive or detection tool rather than an offensive one
• your target platform is not Windows
• you cannot legally use offensive security tooling in your jurisdiction

Facets

cli-tool · maturity stable

security cryptography compiler security penetration-testing windows windows cross-platform cli shellcode position-independent-code in-memory-execution red-team offensive-security dotnet amsi-bypass payload-generation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="TheWover/donut")