mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
b7d3cf717c
- Implemented fully decoupled direct and indirect syscall invocation - Added dynamic PEB-based gadget scanning (syscall; ret / sysenter) - Added x86 & x64 inline MASM stubs with proper stack frame alignment - Introduced SND_USE_DEFAULTS compile-time OpSec macro for lean payload compilation - Extensive documentation across all primitives and examples
Mapping Primitives
Section mapping: open a named section object, map a view into the current process, close the handle. Used for KnownDlls bootstrapping and file-backed section workflows.
Backends are injected as snd_mapping_api_t. Higher-level helper snd_om_knowndll_map() composes mapping callbacks into a KnownDlls workflow (sindri/primitives/object_manager.h).
Caution
snd_map_winlimitation:OpenFileMappingWaccepts DOS paths or Win32 namespace names only — not\KnownDlls\.... Usesnd_map_ntorsnd_map_sysfor Object Manager paths.
Header map
| Header | Role |
|---|---|
sindri/primitives/mapping.h |
snd_map_win, snd_map_nt, snd_map_sys |
sindri/primitives/object_manager.h |
snd_om_knowndll_map |
sindri/primitives/os_api.h |
snd_mapping_api_t callback typedefs |
Source map
| Source | Role |
|---|---|
src/primitives/mapping/win.c |
snd_map_win |
src/primitives/mapping/nt.c |
snd_map_nt |
src/primitives/mapping/sys.c |
snd_map_sys |
src/primitives/object_manager/knowndlls.c |
KnownDlls orchestration |
Table of Contents
- techniques.md — backend comparison, KnownDlls bootstrap
- api_reference.md —
snd_mapping_api_t, instances, object manager
Related documentation
- Syscalls — bootstrap after KnownDlls
ntdllmap - Primitives domain