howmp / donut_ollvm Public

forked from TheWover/donut

Notifications You must be signed in to change notification settings
Fork 9
Star 69

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

BSD-3-Clause license

69 stars 731 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 503 Commits
DemoCreateProcess		DemoCreateProcess
DonutTest		DonutTest
ModuleMonitor		ModuleMonitor
ProcessManager		ProcessManager
docs		docs
examples		examples
generators		generators
img		img
include		include
lib		lib
loader		loader
.gitignore		.gitignore
.gitmodules		.gitmodules
CHANGELOG.md		CHANGELOG.md
Dockerfile		Dockerfile
LICENSE		LICENSE
MANIFEST.in		MANIFEST.in
Makefile		Makefile
Makefile.mingw		Makefile.mingw
Makefile.msvc		Makefile.msvc
Makefile_x86.msvc		Makefile_x86.msvc
README.md		README.md
build.bat		build.bat
clang-cl.exe		clang-cl.exe
donut.c		donut.c
donutmodule.c		donutmodule.c
encrypt.c		encrypt.c
format.c		format.c
hash.c		hash.c
loader_exe_x64.go		loader_exe_x64.go
loader_exe_x64.h		loader_exe_x64.h
loader_exe_x86.go		loader_exe_x86.go
loader_exe_x86.h		loader_exe_x86.h
old-README.md		old-README.md
pyproject.toml		pyproject.toml
setup.py		setup.py
version-release-notes.txt		version-release-notes.txt

Repository files navigation

donut-ollvm

使用OLLVM编译donut的shellcode

原始说明

donut免杀分析:

编译过程

依赖

windows
安装Visual Studio 2022
clang-cl.exe
- 使用https://github.com/wwh1004/ollvm-16/releases
- 已经在本仓库中了

步骤

打开 x86 Native Tools Command Prompt for VS 2022
进入仓库目录
执行 build.bat

About

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Readme

BSD-3-Clause license