14 Commits

Author SHA1 Message Date
Gavin K d21f77ef45 Merge pull request #5 from atomiczsec/devin/1781148087-improve-error-handling
Fix silent error swallowing and improve error propagation across BOFs
2026-06-10 23:31:19 -04:00
Gavin K e1e8b82368 Improve error handling: fix silent failures and add error diagnostics
- applications_enum.c: Remove RegCloseKey on uninitialized handle when
  RegOpenKeyExA fails (undefined behavior bug)
- window_handles_enum.c: Report errors when GetClipboardData or
  GlobalLock fail in TestClipboardAccess instead of silently ignoring
- powershell_history.c: Add error codes to file open/seek/read failures
  in read_snippet_ascii_at for diagnosability
- notepad_grab.c: Report error when CreateToolhelp32Snapshot fails
  in FindNotepadProcesses
- process_tokens_list.c: Report specific failure reason in
  EnableSeDebugPrivilege (OpenProcessToken vs LookupPrivilegeValue)
- wevt_logon_enum.c: Report which wevtapi function failed to resolve
  instead of generic failure message

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-11 03:26:03 +00:00
Gavin K 045126c9af fix: security hardening — GHA injection, wrong constant, invalid JSON
- .github/workflows/release.yml: Fix script injection by moving
  user-controlled inputs (module_path, tag_suffix) to env vars instead
  of direct ${{ }} interpolation in shell blocks. Pin
  softprops/action-gh-release to SHA (v2.6.2). Add explicit
  permissions: contents: read to the detect job.

- collection/ai_surface/ai_surface.c: Replace INVALID_FILE_ATTRIBUTES
  with the correct (DWORD)0xFFFFFFFF for GetFileSize error check.
  Both happen to be 0xFFFFFFFF but the former is semantically wrong.

- discovery/wallpaper_enum/metadata.json: Remove trailing comma that
  made the file invalid JSON.

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-11 03:21:24 +00:00
atomiczsec 748b403bb6 Refactor ai_surface functionality and update documentation
Reduced MAX_PROJECT_HITS from 48 to 16 and renamed sections for improved clarity. Updated functions for artifact reporting and path checks, including new checks for Codex and Claude agent artifacts. Enhanced README to reflect changes in functionality and added details on MCP configuration discovery.
2026-04-25 20:45:40 -04:00
atomiczsec a6cacea6f5 attribution note 2026-04-08 15:31:55 -04:00
atomiczsec 2ca4ee6eb2 Enhance ai_surface functionality and update README
Increased MAX_PROJECT_HITS from 16 to 48 and renamed related sections for clarity. Introduced new functions for reporting artifact hits and directory checks. Updated README to reflect changes in AI configuration and agent artifact discovery, including additional paths for Claude, Cursor, Codex, and Gemini configurations.
2026-04-08 15:24:17 -04:00
atomiczsec c6b7120524 trim README 2026-04-07 22:28:04 -04:00
atomiczsec 4de0982478 update ai_surface, new sources and collection 2026-04-07 18:36:17 -04:00
atomiczsec 305ffeaa87 add powershell_history 2026-03-27 14:31:36 -04:00
atomiczsec 95c6663b47 fixed make files that caused BOF to crash in some instances [skip ci] 2026-02-17 15:25:42 -05:00
atomiczsec ffa47383fe del placeholder 2026-02-07 22:47:04 -05:00
atomiczsec 7917fae7cc change directory structure to mirror the MITRE framework taxonomy for easier understanding 2026-02-05 13:49:45 -05:00
atomiczsec 4cd001876a Add files via upload 2026-01-09 10:25:47 -05:00
atomiczsec b352243e5a Create placeholder 2026-01-09 10:23:49 -05:00