mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
aea2eb6cfb
- Implement complete cross-process injection engine via snd_inj_ctx_t - Track explicit remote_entry_point for safe thread hijacking and PE execution - Refactor standalone syscall resolvers into a unified pipeline (scan/sort) - Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes - Fix minor pointer validation and parsing bugs in the reflective loader
1.2 KiB
1.2 KiB
Process Primitives
Remote process interaction: open target, allocate/write/protect remote memory, create a remote thread. Operations route through an injected snd_process_api_t table.
Primary consumer: injection domain (snd_inj_ctx_t.proc_api).
Caution
OpSec:
snd_proc_winroutes cross-process operations through monitored Win32 APIs. Prefersnd_proc_sysorsnd_proc_ntfor evasive deployments.
Header map
| Header | Role |
|---|---|
sindri/primitives/process.h |
snd_proc_win, snd_proc_nt, snd_proc_sys |
sindri/primitives/os_api.h |
snd_process_api_t callback typedefs |
Source map
| Source | Backend |
|---|---|
src/primitives/process/win.c |
snd_proc_win |
src/primitives/process/nt.c |
snd_proc_nt |
src/primitives/process/sys.c |
snd_proc_sys |
Table of Contents
- techniques.md — Win32 vs NT vs syscall paradigms, injection integration
- api_reference.md —
snd_process_api_tand instances
Related documentation
- Injection domain
- Syscalls — bootstrap for
snd_proc_sys - Primitives domain