mirror of https://github.com/youssefnoob003/SindriKit synced 2026-07-07 21:57:09 +00:00

Files

T

History

sibouzitoun b7d3cf717c Release v1.2.0: Indirect Syscalls & Pipeline Decoupling

- Implemented fully decoupled direct and indirect syscall invocation
- Added dynamic PEB-based gadget scanning (syscall; ret / sysenter)
- Added x86 & x64 inline MASM stubs with proper stack frame alignment
- Introduced SND_USE_DEFAULTS compile-time OpSec macro for lean payload compilation
- Extensive documentation across all primitives and examples

2026-06-29 19:31:15 +01:00

api_reference.md

Release v1.1.0: Process Injection & Architecture Hardening

2026-06-28 14:14:54 +01:00

README.md

Release v1.1.0: Process Injection & Architecture Hardening

2026-06-28 14:14:54 +01:00

techniques.md

Release v1.2.0: Indirect Syscalls & Pipeline Decoupling

2026-06-29 19:31:15 +01:00

README.md

Process Primitives

Remote process interaction: open target, allocate/write/protect remote memory, create a remote thread. Operations route through an injected snd_process_api_t table.

Primary consumer: injection domain (snd_inj_ctx_t.proc_api).

Caution

OpSec: snd_proc_win routes cross-process operations through monitored Win32 APIs. Prefer snd_proc_sys or snd_proc_nt for evasive deployments.

Header map

Header	Role
`sindri/primitives/process.h`	`snd_proc_win`, `snd_proc_nt`, `snd_proc_sys`
`sindri/primitives/os_api.h`	`snd_process_api_t` callback typedefs

Source map

Source	Backend
`src/primitives/process/win.c`	`snd_proc_win`
`src/primitives/process/nt.c`	`snd_proc_nt`
`src/primitives/process/sys.c`	`snd_proc_sys`

techniques.md — Win32 vs NT vs syscall paradigms, injection integration
api_reference.md — snd_process_api_t and instances

Injection domain
Syscalls — bootstrap for snd_proc_sys
Primitives domain

README.md

Process Primitives

Header map

Source map

Table of Contents

Related documentation