Hello, I'm Matt Glass,
and welcome to Pluralsight and this red team tools course featuring Donut,
the open source shell code generation tool developed by TheWover and
maintained by multiple contributors on GitHub. Donut is a tool that
penetration testers and ethical hackers can use to generate shell code
payloads from existing executables and scripts.
Donut leverages a vulnerability in the way Windows processes
.NET applications, enabling the injection of shell code into
existing processes. Using Donut,
you can execute these payloads and even bypass built‑in Windows defenses.
Each version of Donut is named after a specific type of donut. For
this course, we're using version 0.92, Bear Claw.
Come join me as we use Donut for execution and attack our
targets by injecting shell code payloads.