WEBVTT

00:00:05.340 --> 00:00:06.920
Hello, I'm Matt Glass,

00:00:06.920 --> 00:00:10.920
and welcome to Pluralsight and this red team tools course featuring Donut,

00:00:10.930 --> 00:00:14.530
the open source shell code generation tool developed by TheWover and

00:00:14.530 --> 00:00:19.130
maintained by multiple contributors on GitHub. Donut is a tool that

00:00:19.130 --> 00:00:23.060
penetration testers and ethical hackers can use to generate shell code

00:00:23.060 --> 00:00:26.460
payloads from existing executables and scripts.

00:00:27.540 --> 00:00:31.060
Donut leverages a vulnerability in the way Windows processes

00:00:31.070 --> 00:00:35.150
.NET applications, enabling the injection of shell code into

00:00:35.150 --> 00:00:38.600
existing processes. Using Donut,

00:00:38.710 --> 00:00:43.070
you can execute these payloads and even bypass built‑in Windows defenses.

00:00:44.240 --> 00:00:48.580
Each version of Donut is named after a specific type of donut. For

00:00:48.580 --> 00:00:52.550
this course, we're using version 0.92, Bear Claw.

00:00:53.940 --> 00:00:57.750
Come join me as we use Donut for execution and attack our

00:00:57.750 --> 00:01:00.600
targets by injecting shell code payloads.