Donut is a toolset for loading and executing payloads in memory, featuring a position-independent shellcode generator, an in-memory payload injector, and a .NET assembly loader. It is designed to convert executable files and scripts into shellcode that can be executed within the memory space of a remote process without writing files to disk. The project specializes in security evasion through memory-based patching and payload obfuscation using symmetric block ciphers and compression. It includes a remote payload stager to retrieve encrypted modules from HTTP or DNS servers during runtime, red
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
RuralBishop is practically a carbon copy of UrbanBishop by b33f, but all P/Invoke calls have been replaced with D/Invoke.
Principalele funcționalități ale rasta-mouse/ruralbishop sunt: Initial Access Frameworks, Payload Development, Shellcode Injection.
Alternativele open-source pentru rasta-mouse/ruralbishop includ: thewover/donut — Donut is a toolset for loading and executing payloads in memory, featuring a position-independent shellcode generator,… cobbr/sharpsploit — SharpSploit is a .NET post-exploitation library written in C# that aims to highlight the attack surface of .NET and… 9emin1/charlotte — c++ fully undetected shellcode launcher ;). aaaddress1/xlsgen — Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in *.xls. bats3c/darkarmour — Store and execute an encrypted windows binary from inside memory, without a single bit touching disk. 0xsp-srd/mortar — evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR).
