Files
Gavin K e1e8b82368 Improve error handling: fix silent failures and add error diagnostics
- applications_enum.c: Remove RegCloseKey on uninitialized handle when
  RegOpenKeyExA fails (undefined behavior bug)
- window_handles_enum.c: Report errors when GetClipboardData or
  GlobalLock fail in TestClipboardAccess instead of silently ignoring
- powershell_history.c: Add error codes to file open/seek/read failures
  in read_snippet_ascii_at for diagnosability
- notepad_grab.c: Report error when CreateToolhelp32Snapshot fails
  in FindNotepadProcesses
- process_tokens_list.c: Report specific failure reason in
  EnableSeDebugPrivilege (OpenProcessToken vs LookupPrivilegeValue)
- wevt_logon_enum.c: Report which wevtapi function failed to resolve
  instead of generic failure message

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-11 03:26:03 +00:00
..
2026-02-17 21:48:52 -05:00
2026-02-17 21:48:52 -05:00
2026-02-07 22:07:28 -05:00

notepad_grab

Beacon Object File that extracts text content from open Notepad windows.

Based on NoteThief by trainr3kt.

Usage

beacon> inline-execute notepad_grab.x64.o

Output

[*] Starting COFF Execution...

[+] *example title - Notepad

sample notepad content

lorem ipsum

[*] COFF Finished. 

Credits

Original: trainr3kt/NoteThief