mirror of https://github.com/youssefnoob003/SindriKit synced 2026-07-07 21:57:09 +00:00

Files

T

sibouzitoun aea2eb6cfb Release v1.1.0: Process Injection & Architecture Hardening

- Implement complete cross-process injection engine via snd_inj_ctx_t
- Track explicit remote_entry_point for safe thread hijacking and PE execution
- Refactor standalone syscall resolvers into a unified pipeline (scan/sort)
- Perfect status code system by purging generic fallbacks in favor of highly-specific, domain-aware error codes
- Fix minor pointer validation and parsing bugs in the reflective loader

2026-06-28 14:14:54 +01:00

1.4 KiB

Raw Blame History

Mapping Primitives

Section mapping: open a named section object, map a view into the current process, close the handle. Used for KnownDlls bootstrapping and file-backed section workflows.

Backends are injected as snd_mapping_api_t. Higher-level helper snd_om_knowndll_map() composes mapping callbacks into a KnownDlls workflow (sindri/primitives/object_manager.h).

Caution

snd_map_win limitation: OpenFileMappingW accepts DOS paths or Win32 namespace names only — not \KnownDlls\.... Use snd_map_nt or snd_map_sys for Object Manager paths.

Header map

Header	Role
`sindri/primitives/mapping.h`	`snd_map_win`, `snd_map_nt`, `snd_map_sys`
`sindri/primitives/object_manager.h`	`snd_om_knowndll_map`
`sindri/primitives/os_api.h`	`snd_mapping_api_t` callback typedefs

Source map

Source	Role
`src/primitives/mapping/win.c`	`snd_map_win`
`src/primitives/mapping/nt.c`	`snd_map_nt`
`src/primitives/mapping/sys.c`	`snd_map_sys`
`src/primitives/object_manager/knowndlls.c`	KnownDlls orchestration

techniques.md — backend comparison, KnownDlls bootstrap
api_reference.md — snd_mapping_api_t, instances, object manager

Syscalls — bootstrap after KnownDlls ntdll map
Primitives domain

1.4 KiB Raw Blame History

Mapping Primitives

Header map

Source map

Table of Contents

Related documentation

1.4 KiB

Raw Blame History