Files
Gavin K e1e8b82368 Improve error handling: fix silent failures and add error diagnostics
- applications_enum.c: Remove RegCloseKey on uninitialized handle when
  RegOpenKeyExA fails (undefined behavior bug)
- window_handles_enum.c: Report errors when GetClipboardData or
  GlobalLock fail in TestClipboardAccess instead of silently ignoring
- powershell_history.c: Add error codes to file open/seek/read failures
  in read_snippet_ascii_at for diagnosability
- notepad_grab.c: Report error when CreateToolhelp32Snapshot fails
  in FindNotepadProcesses
- process_tokens_list.c: Report specific failure reason in
  EnableSeDebugPrivilege (OpenProcessToken vs LookupPrivilegeValue)
- wevt_logon_enum.c: Report which wevtapi function failed to resolve
  instead of generic failure message

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-11 03:26:03 +00:00
..
2026-05-06 09:58:16 -04:00
2026-05-06 14:08:53 -04:00

Community Inspired BOFs

The community/ directory collects BOFs and tools that are from outside this repository (the community) and have been fit to follow the BOF framework constraints:

  • No dependency on repository specific framework headers, implementations, or utility libraries
  • No CRT
  • Standardized output
  • Safety caps to avoid hanging

Current Community Ports

TrustedSec CS-Situational-Awareness-BOF

BOF Description Original
schtask_enum/ Enumerate scheduled tasks w COM Task Scheduler API, clean output (no xml, which caused BOF to hang) schtaskenum
net_use/ Add, list, or remove mapped drives via MPR (WNet*) with bounded, BOF-safe output handling netuse

SessionView by lsecqt

BOF Description Original
session_view/ Enumerate Windows Terminal Services sessions, displaying session IDs, usernames, domains, connection states, and session LUIDs SessionView

NoteThief by trainr3kt

BOF Description Original
notepad_grab/ Extract text content from open Notepad windows notethief