TextTransform.exe

A security researcher has released an open-source payload builder that generates shellcode loaders executed through TextTransform.exe and .tt template files, a living-off-the-land technique that abuses a trusted Visual Studio component to run malicious code. The tool is circulating among red teamers and penetration testers, raising concerns it could also be adopted by attackers to evade detection.