TheWover / donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
BSD 3-Clause "New" or "Revised" License
3.38k stars 610 forks source link

Does it support cobalt strike exe ? #103

Closed loadeddypper closed 1 year ago

loadeddypper commented 2 years ago

I am using cobalt strike 4.5 and python 3.9 to generate a shellcode for beacon.exe using donut.create, i used multiple methods from ired.team but none of them worked and i couldn't get a connection my script works fine because other rats work when using my script

S4ntiagoP commented 2 years ago

As far as I tested, beacon.exe has no relocation information, so it is no supported in the main branch. You can try with this fork which supports those binaries: https://github.com/TheWover/donut/pull/101

TheWover commented 1 year ago

Fixed by #101