Files
Gavin K e1e8b82368 Improve error handling: fix silent failures and add error diagnostics
- applications_enum.c: Remove RegCloseKey on uninitialized handle when
  RegOpenKeyExA fails (undefined behavior bug)
- window_handles_enum.c: Report errors when GetClipboardData or
  GlobalLock fail in TestClipboardAccess instead of silently ignoring
- powershell_history.c: Add error codes to file open/seek/read failures
  in read_snippet_ascii_at for diagnosability
- notepad_grab.c: Report error when CreateToolhelp32Snapshot fails
  in FindNotepadProcesses
- process_tokens_list.c: Report specific failure reason in
  EnableSeDebugPrivilege (OpenProcessToken vs LookupPrivilegeValue)
- wevt_logon_enum.c: Report which wevtapi function failed to resolve
  instead of generic failure message

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-11 03:26:03 +00:00
..

Applications Count BOF

Summary

This Beacon Object File (BOF) enumerates installed applications by querying the number of subkeys under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall in the Windows Registry and returns the total count.

Example Output

[*] Tasked beacon to run BOF
[+] host called home, sent: 10 bytes
[+] received output:
Found 123 installed applications.