mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
aea2eb6cfb
- Implement complete cross-process injection engine via snd_inj_ctx_t - Track explicit remote_entry_point for safe thread hijacking and PE execution - Refactor standalone syscall resolvers into a unified pipeline (scan/sort) - Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes - Fix minor pointer validation and parsing bugs in the reflective loader
1.3 KiB
1.3 KiB
Env Parser
Runtime interpretation of Windows process environment structures — primarily the PEB and loader module lists. Headers under include/sindri/parsers/env/, aggregated by include/sindri/parsers/env.h.
NT layouts (SND_PEB, SND_LDR_DATA_TABLE_ENTRY, …) live in include/sindri/internal/nt/peb.h. The env parser uses these layouts without Win32 API calls.
Header map
| Header | Role |
|---|---|
peb.h |
Local PEB access, module list walking (string and hash) |
Source map
| Source | Implements |
|---|---|
src/parsers/env/peb.c |
PEB module resolution |
Scope
| Area | Status | Notes |
|---|---|---|
| PEB module walking | Implemented | snd_peb_get_module_base, snd_peb_get_module_base_hash |
| Local PEB accessor | Implemented | snd_peb_get_local (segment register read) |
| TEB access | Planned | Thread Environment Block helpers |
| Process parameters | Planned | Command line, image path, environment block |
Table of Contents
- techniques.md — PEB layout, module list walking, hash lookup
- api_reference.md — full public env API
Related documentation
- Parsers domain
- PE parser — EAT parsing used with env resolvers
- Internal NT layouts