mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
da52e28ca5
- Implemented native Call Stack Spoofing with a coordinated JMP-Trampoline - Added dynamic .pdata Exception Directory parsing to discover Fat Frames (>= 120 bytes) - Added x86 & x64 spoofed MASM stubs with synchronized EDR unwinder offset logic
53 lines
1.7 KiB
INI
53 lines
1.7 KiB
INI
# =============================================================================
|
|
# SindriKit Hash Manifest
|
|
# =============================================================================
|
|
# This file is the single source of truth for all compile-time string hashes.
|
|
# The build system runs scripts/generate_hashes.py against it at build time and
|
|
# produces include/generated/sindri_hashes.h.
|
|
#
|
|
# FORMAT
|
|
# ------
|
|
# Group API names under a [module::<dll_name>] section header.
|
|
# The build system automatically generates a hash for both the module name
|
|
# itself and every API listed beneath it.
|
|
#
|
|
# Standalone strings that do not belong to any module (e.g. registry key
|
|
# names, object paths) go under [extras]. No module hash is generated for
|
|
# that section.
|
|
#
|
|
# Lines beginning with # are comments and are ignored by the parser.
|
|
# Blank lines are ignored.
|
|
#
|
|
# ADDING A NEW DOMAIN
|
|
# -------------------
|
|
# Add a new [module::<dll_name>] section for the target DLL and list the
|
|
# APIs your domain implementation calls. One build regenerates everything.
|
|
# =============================================================================
|
|
|
|
|
|
# -- ntdll.dll ----------------------------------------------------------------
|
|
# Syscall targets.
|
|
# Also provides LdrLoadDll for the native module loader.
|
|
[module::ntdll.dll]
|
|
NtAllocateVirtualMemory
|
|
NtProtectVirtualMemory
|
|
NtFreeVirtualMemory
|
|
NtOpenSection
|
|
NtMapViewOfSection
|
|
NtClose
|
|
LdrLoadDll
|
|
NtWriteVirtualMemory
|
|
NtCreateThreadEx
|
|
NtOpenProcess
|
|
|
|
# -- kernel32.dll -------------------------------------------------------------
|
|
# Win32 wrappers used by the snd_proc_win injection backend.
|
|
[module::kernel32.dll]
|
|
OpenProcess
|
|
VirtualAllocEx
|
|
WriteProcessMemory
|
|
VirtualProtectEx
|
|
CreateRemoteThread
|
|
CloseHandle
|
|
BaseThreadInitThunk
|