WEBVTT

00:00:01.140 --> 00:00:05.260
Well, we've come to the end of this course on Execution with Donut. We

00:00:05.260 --> 00:00:09.260
generated two shellcode payloads and successfully executed them on our Windows

00:00:09.260 --> 00:00:14.150
target. Files that were previously marked as malicious were successfully loaded

00:00:14.150 --> 00:00:19.730
and executed on our target host using the built‑in Donut injector. For

00:00:19.730 --> 00:00:24.360
additional Donut capability information, this link takes you to the GitHub site

00:00:24.370 --> 00:00:29.210
which covers Donut's capabilities in more depth. To get a better understanding

00:00:29.220 --> 00:00:34.850
of in‑memory execution using shellcode, follow this link. If you're interested

00:00:34.850 --> 00:00:39.460
in injecting .NET assemblies as shellcode specifically, the creator of Donut

00:00:39.460 --> 00:00:44.480
provided this post introducing Donut and its capabilities. To explore

00:00:44.480 --> 00:00:49.120
additional execution topics within the MITRE ATT&CK framework, visit this link

00:00:49.320 --> 00:00:53.330
to the execution tactic overall. For defense evasion,

00:00:53.600 --> 00:00:56.260
this link will take you to the defense evasion tactic.

00:00:57.640 --> 00:01:00.060
I hope you enjoyed this red team tools course on Donut.

00:01:00.440 --> 00:01:02.960
Continue exploring, and check out the other red team

00:01:02.960 --> 00:01:05.360
tools courses available on Pluralsight.