search

TheWover / donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
BSD 3-Clause "New" or "Revised" License
3.53k stars 628 forks source link

Add option to not destroy headers #84

Closed TheWover closed 1 year ago

TheWover commented 3 years ago

Currently, we always destroy the PE headers before execution. There should be an option to skip this in case the payload has some logic that requires the existence of those headers at runtime.

TheWover commented 3 years ago

-k,--headers: <level> Preserve PE headers. 1=Overwrite (default), 2=Keep all

TheWover commented 3 years ago

Resolved in dev, will be merged with next version.