Donut
Convert EXE/DLL into position-independent shellcode.
KaliParrothigh
pkg: donut
Donut turns .NET/PE files into shellcode that can be injected in-memory — common for evasion and loaders.
Syntax
donut -i {file} -o {out.bin}
Example
donut -i payload.exe -o sc.bin
Produces shellcode you can inject from a loader.
Advantages
- In-memory execution
- Supports .NET assemblies
Disadvantages
- Advanced red-team use
- Easily abused
Tags
#shellcode#evasion
Official docs: Donut ↗
Related commands
Frequently asked questions
What is Donut used for?
Donut turns .NET/PE files into shellcode that can be injected in-memory — common for evasion and loaders.
What is an example Donut command?
A common example is: donut -i payload.exe -o sc.bin — Produces shellcode you can inject from a loader.
Is Donut part of Kali Linux?
Yes. Donut ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install donut.
What category of security tool is Donut?
Donut is a Exploitation tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.