-
Notifications
You must be signed in to change notification settings - Fork 639
v1.0 Plans
TheWover edited this page Nov 6, 2019
·
9 revisions
Remove the XSL transformer. It provides no operational advantage to the ActiveScript loader, since it only supports JScript and VBScript.Add a Go implementation ofdonut.c
.- Write a blog post "Go-ing Nuts for Donut: Using Donut to Load Go Executables from Memory"
- Add a C# implementation of
donut.c
. Use an #ifdef to optionally build the Assembly with a hardcoded version ofpayload_*.h
so that shellcode may be generated in memory. - Command-line arguments for unmanaged EXEs
- Compress before encrypting. Try using
RtlDecompressBuffer
. In the generator, provide the option for 0 = no compression, 1 = LZ compression, and 2 = Xpress compression. - Fix issues compiling with NOCRYPTO flag
- Provide instructions on building with no crypto
Add an option to exit the process when the invoked payload is complete. Otherwise exit the thread.- Add an exported function to the DLL that lets you pass in arguments like is normally done for the EXE. That way you don't have to painfully marshal structs between languages.
Add an option to encode the output in various formats.- Add an option to download module via DNS A staging.