mirror of
https://github.com/atomiczsec/Adrenaline
synced 2026-06-21 13:47:29 +00:00
Gavin K
e1e8b82368
- applications_enum.c: Remove RegCloseKey on uninitialized handle when RegOpenKeyExA fails (undefined behavior bug) - window_handles_enum.c: Report errors when GetClipboardData or GlobalLock fail in TestClipboardAccess instead of silently ignoring - powershell_history.c: Add error codes to file open/seek/read failures in read_snippet_ascii_at for diagnosability - notepad_grab.c: Report error when CreateToolhelp32Snapshot fails in FindNotepadProcesses - process_tokens_list.c: Report specific failure reason in EnableSeDebugPrivilege (OpenProcessToken vs LookupPrivilegeValue) - wevt_logon_enum.c: Report which wevtapi function failed to resolve instead of generic failure message Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Window Handles Enum BOF
Summary
This Beacon Object File (BOF) enumerates window handles across all system processes and uses a legitimate window handle to access the clipboard, potentially evading detection.
Example Output
[+] Found 156 total processes
[+] Actionable window (HWND: 0x000A0B1C) PID: 5432
Title: Microsoft Edge
[*] Actionable windows found: 23
[+] Using HWND 0x000A0B1C for clipboard access
[+] Clipboard contents: password123