mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
aea2eb6cfb
- Implement complete cross-process injection engine via snd_inj_ctx_t - Track explicit remote_entry_point for safe thread hijacking and PE execution - Refactor standalone syscall resolvers into a unified pipeline (scan/sort) - Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes - Fix minor pointer validation and parsing bugs in the reflective loader
2.3 KiB
2.3 KiB
Examples & Proof of Concepts
Standalone executables under pocs/ demonstrate SindriKit domains end-to-end. Each PoC is a thin CLI wrapper around library chain functions — the same APIs documented in the domain references.
PoCs build when SND_CRTLESS=OFF (default). CRT-less mode replaces the full PoC set with loader_noCRT_nowinapi only.
Each PoC walkthrough follows: Location → What it demonstrates → (Command-line) → Walkthrough → Building → OpSec → See also.
OpSec profiles
| PoC | Loader / injection | Memory | Modules | Process | Syscall bootstrap |
|---|---|---|---|---|---|
loader_winapi |
Local reflective | snd_mem_win |
snd_mod_win |
— | Optional |
loader_nowinapi |
Local reflective | snd_mem_nt |
snd_mod_nt |
— | Required (disk ntdll) |
loader_noCRT_nowinapi |
Local reflective | snd_mem_win |
snd_mod_nt |
— | Required (PEB ntdll) |
inject_shell |
Classic shellcode | — | — | snd_proc_win |
Yes (KnownDlls; unused while _win) |
inject_pe |
Classic PE | snd_mem_sys |
snd_mod_nt |
snd_proc_sys |
Required (KnownDlls) |
heavens_gate |
WoW64 → x64 exec | Win32 alloc (demo) | — | — | N/A |
Table of Contents
Loaders (local reflective PE)
- loader_winapi.md — Win32 APIs, diagnostic baseline, DLL export FFI
- loader_nowinapi.md — NT backends, syscall pipeline bootstrap
- loader_noCRT_nowinapi.md —
/NODEFAULTLIB, minimal CRT-less footprint
Injection (remote classic)
- inject_shell.md — Raw shellcode via
snd_inj_classic_shell - inject_pe.md — PE bake + remote execute via
snd_inj_classic_pe
Execution primitives
- heavens_gate.md — WoW64 → native x64 transition
Building all PoCs
cmake -B build -DSND_BUILD_PAYLOADS=ON
cmake --build build --config Release
Binaries land under build/pocs/<name>/Release/ (MSVC multi-config) or build/pocs/<name>/ (single-config generators).
CRT-less PoC only:
cmake -B build -DSND_CRTLESS=ON -DSND_ENABLE_DEBUG=OFF
cmake --build build --config Release