go-donut
root@kali:~# go-donut -h
usage: go-donut [-h|--help] [-n|--module "<value>"] [-u|--url "<value>"]
[-e|--entropy <integer>] [-a|--arch "<value>"] [-b|--bypass
<integer>] [-o|--out "<value>"] [-f|--format <integer>]
[-y|--oep "<value>"] [-x|--exit <integer>] [-c|--class
"<value>"] [-d|--domain "<value>"] [-m|--method "<value>"]
[-p|--params "<value>"] [-w|--unicode] [-r|--runtime "<value>"]
[-t|--thread] [-z|--compress <integer>] -i|--in "<value>"
[-v|--verbose]
Convert a VBS/JS or PE/.NET EXE/DLL to shellcode.
Only the finest artisanal donuts are made of shells.
Arguments:
-h --help Print help information
-n --module Module name. Randomly generated by default with entropy
enabled.
-u --url HTTP server that will host the donut module.
-e --entropy Entropy. 1=disable, 2=use random names, 3=random names +
symmetric encryption (default). Default: 3
-a --arch Target Architecture: x32, x64, or x84. Default: x84
-b --bypass Bypass AMSI/WLDP : 1=skip, 2=abort on fail, 3=continue on
fail.. Default: 3
-o --out Output file.. Default: loader.bin
-f --format Output format. 1=raw, 2=base64, 3=c, 4=ruby, 5=python,
6=powershell, 7=C#, 8=hex. Default: 1
-y --oep Create a new thread for loader. Optionally execute original
entrypoint of host process.
-x --exit Exiting. 1=exit thread, 2=exit process. Default: 1
-c --class Optional class name. (required for .NET DLL)
-d --domain AppDomain name to create for .NET. Randomly generated by
default with entropy enabled.
-m --method Optional method or API name for DLL. (a method is required
for .NET DLL)
-p --params Optional parameters/command line inside quotations for DLL
method/function or EXE.
-w --unicode Command line is passed to unmanaged DLL function in UNICODE
format. (default is ANSI)
-r --runtime CLR runtime version. This will override the auto-detected
version.
-t --thread Create new thread for entrypoint of unmanaged EXE.
-z --compress Pack/Compress file. 1=disable, 2=LZNT1, 3=Xpress, 4=Xpress
Huffman. Default: 1
-i --in .NET assembly, EXE, DLL, VBS, JS or XSL file to execute
in-memory.
-v --verbose Show verbose output.