SindriKit is a Windows evasion toolkit written in C. This major release introduces the Pre-Compilation Polymorphic Mutation Engine (SND_MORPH), enabling automated source-level and instruction-level polymorphism to eliminate static signatures across C source files, assembly stubs, and internal data structures before the final compilation pass.
Major Additions (v1.5.0)
- Polymorphic Build Pipeline (
SND_MORPH): Implemented a staging engine controlled via CMake. When enabled, the orchestrator automatically clones the codebase into a temporary directory, applies mutation passes sequentially, and redirects the compiler pipeline to generate a structurally unique binary every single build. - C Source Mutator & Call Graph Splitting (
junk_c.py): Injects volatile-backed opaque predicates and diverse control-flow shapes (switches, loops, and conditions) that survive dead-code elimination passes. Features a localized generator that inserts randomized, math-heavy dead functions to drastically complicate basic block analysis and call graph mapping. - Metamorphic Assembly Engine (
masm_mutate.py): Introduces instruction-level polymorphism for hand-written MASM stubs. The engine uses strict flag-neutral instruction substitutes (such as register-isolatedleaandmovalterations) combined with multi-byte functional NOP interleaving to alter binary code signatures safely without corrupting status flags (EFLAGS) or conditional jumps. - Pragma-Driven Structural Polymorphism (
struct_shuffle.py): Dynamically scrambles the internal memory layout and variable offsets of framework structures isolated by opt-in sentinel macros (SND_SHUFFLE_START/SND_SHUFFLE_END). The parser safely tracks atomic blocks and nested scopes to randomize alignment layouts while preventing compilation breaks.
Warning
No Pre-Compiled Binaries
For Operational Security (OpSec) reasons, no pre-compiled binaries are provided. Please compile the framework and the bundled PoCs directly from source using the CMake pipeline.
SindriKit is built exclusively for educational, research, and authorized Red Teaming purposes.