mirror of
https://github.com/youssefnoob003/SindriKit
synced 2026-07-07 21:57:09 +00:00
sibouzitoun
b7d3cf717c
- Implemented fully decoupled direct and indirect syscall invocation - Added dynamic PEB-based gadget scanning (syscall; ret / sysenter) - Added x86 & x64 inline MASM stubs with proper stack frame alignment - Introduced SND_USE_DEFAULTS compile-time OpSec macro for lean payload compilation - Extensive documentation across all primitives and examples
Injection Domain
Remote process injection: open target, allocate remote memory, write payload, set protections, create a remote thread. Cross-process operations route through an injected snd_process_api_t table.
Shared context vs loader contexts
Unlike loaders, all injection techniques share snd_inj_ctx_t (sindri/injection/context.h). Stage machine, handles, remote fields, and proc_api are identical across classic and future techniques.
Each technique adds engine functions and chains under a subdirectory but mutates the same context:
include/sindri/injection/
├── context.h <- shared across ALL techniques
└── classic/
├── engine.h <- per-stage classic engine
└── chain.h <- snd_inj_classic_shell, snd_inj_classic_pe
Loader contexts are per-technique (snd_ldr_pe_ctx_t today).
Header map
| Header | Role |
|---|---|
sindri/injection.h |
Umbrella include |
sindri/injection/context.h |
snd_inj_ctx_t, stages, snd_inj_cleanup |
sindri/injection/classic.h |
Classic technique umbrella |
sindri/injection/classic/engine.h |
Per-stage engine functions |
sindri/injection/classic/chain.h |
snd_inj_classic_shell, snd_inj_classic_pe |
Implemented techniques
| Technique | Chain | Payload |
|---|---|---|
| Classic shellcode | snd_inj_classic_shell |
Raw buffer in inj_ctx.payload |
| Classic PE | snd_inj_classic_pe |
Local bake + remote execute (requires snd_ldr_pe_ctx_t) |
PoCs
| PoC | Chain | Profile |
|---|---|---|
pocs/inject_shell/main.c |
snd_inj_classic_shell |
KnownDlls bootstrap + snd_proc_win |
pocs/inject_pe/main.c |
snd_inj_classic_pe |
snd_mem_sys, snd_mod_nt, snd_proc_sys |
Table of Contents
- techniques.md — classic pipelines, stage machine, loader interop
- api_reference.md — context, engine, and chain API
Related documentation
- Loaders domain — local PE bake for classic PE path
- Process primitives
- Examples