mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
b7d3cf717c
- Implemented fully decoupled direct and indirect syscall invocation - Added dynamic PEB-based gadget scanning (syscall; ret / sysenter) - Added x86 & x64 inline MASM stubs with proper stack frame alignment - Introduced SND_USE_DEFAULTS compile-time OpSec macro for lean payload compilation - Extensive documentation across all primitives and examples
Memory Primitives
Local virtual memory management: allocation, protection changes, and deallocation in the current process. All operations route through an injected snd_memory_api_t table.
Caution
OpSec:
snd_mem_winroutes through userland hooks inkernel32/ntdll. Prefersnd_mem_ntorsnd_mem_sysfor evasive deployments.
Header map
| Header | Role |
|---|---|
sindri/primitives/memory.h |
Pre-built instances: snd_mem_win, snd_mem_nt, snd_mem_sys |
sindri/primitives/os_api.h |
snd_memory_api_t callback typedefs |
Source map
| Source | Backend |
|---|---|
src/primitives/memory/win.c |
snd_mem_win |
src/primitives/memory/nt.c |
snd_mem_nt |
src/primitives/memory/sys.c |
snd_mem_sys |
Table of Contents
- techniques.md — Win32 vs NT vs syscall paradigms
- api_reference.md —
snd_memory_api_tand instances
Related documentation
- Primitives domain
- Syscalls — bootstrap required for
snd_mem_sys