SindriKit — a C library for developing offensive tools on Windows

Tools2026-06-24, 13:41
SindriKit provides an architecture that separates technique logic (loader, injector, patcher) from execution mechanics (Win32 API, NTAPI, direct syscalls). This design lets developers change how the toolkit interacts with the OS without reworking the core logic.
Features: 📍 API-level abstraction for managing memory, modules, threads, and processes via function tables 📍 Cascading syscall resolution with support for Hell's Gate, Halo's Gate, and Veles strategies 📍 Compile-time obfuscation supporting DJB2 and FNV1A hashing algorithms, along with random seed generation 📍 PE file parser with boundary checks and support for PE32 and PE32+ formats 📍 Execution profiles (Win32, Native, Custom) enabling switching between different syscall implementations
In terms of purpose, SindriKit is similar to projects like TitanLdr and Mythic Loader. However, SindriKit does not include ready-made agents, implants, or network modules, serving instead as a base platform for building custom solutions.
Products
Mythic Loader
Sindrikit
Titanldr
Windows