Release v1.1.0: Process Injection & Architecture Hardening

- Implement complete cross-process injection engine via snd_inj_ctx_t
- Track explicit remote_entry_point for safe thread hijacking and PE execution
- Refactor standalone syscall resolvers into a unified pipeline (scan/sort)
- Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes
- Fix minor pointer validation and parsing bugs in the reflective loader
This commit is contained in:
sibouzitoun
2026-06-28 14:14:54 +01:00
parent afffc17dfe
commit aea2eb6cfb
180 changed files with 8387 additions and 3659 deletions
+14 -1
View File
@@ -26,7 +26,7 @@
# -- ntdll.dll ----------------------------------------------------------------
# Syscall targets resolved via Hell's / Halo's / Tartarus' / VelesReek Gate.
# Syscall targets.
# Also provides LdrLoadDll for the native module loader.
[module::ntdll.dll]
NtAllocateVirtualMemory
@@ -36,3 +36,16 @@ NtOpenSection
NtMapViewOfSection
NtClose
LdrLoadDll
NtWriteVirtualMemory
NtCreateThreadEx
NtOpenProcess
# -- kernel32.dll -------------------------------------------------------------
# Win32 wrappers used by the snd_proc_win injection backend.
[module::kernel32.dll]
OpenProcess
VirtualAllocEx
WriteProcessMemory
VirtualProtectEx
CreateRemoteThread
CloseHandle