Sign in to follow this  
Followers 0
OldCoder

Registry Export

5 posts in this topic

#1 ·  Posted (edited)

I am trying to export/import some hives from my registry, some of which are protected, (ie. HKLM\SECURITY), and have hit the proverbial "brick wall". I have tried using ENGINE's excellent UDFs REG.AU3 & PRIVILEGE.AU3 and it works nice for the unprotected parts, (I thought the PRIVILEGE.AU3 would make it possible to export/import protected keys/hive). I used _RegSaveHive() on HKLM\SECURITY and it returned an error. Other hives under HKLM worked, like SAM and SOFTWARE...am I doing something wrong? I figured, since REG.AU3 UDFs sets privileges, it should work saving and restoring, but this is not the case. I tried playing with the privileges a bit, but can't get it to work.

My test script looks like this:

#include "Reg.au3"
#include "Privilege.au3"

$key = StringSplit("HARDWARE|SAM|SECURITY|SOFTWARE|SYSTEM", "|")
For $t = 1 To $key[0]
    FileDelete($key[$t])
    _RegSaveHive($key[$t], "HKLM\" & $key[$t])
    If @error Then MsgBox(0,"ERROR","ERROR trying to export " & $key[$t])
Next

Using the DOS command AT, (in XP), I can bypass privileges and get to the HKLM\SECURITY hive and even save or restore it. Though this method is messy and I'd really prefer to use an API call.

Can anyone help me out here? Am I being stupid, missing the obvious?

Thanks,

OldCoder

:)

Edited by OldCoder

"Intelligence is the ability to adapt to change."                                      - Stephen Hawking                                        "...not the ability to exploit others."                                                  - OldCoder

Share this post


Link to post
Share on other sites



#2 ·  Posted (edited)

*Bumpty Bump

Edited by OldCoder

"Intelligence is the ability to adapt to change."                                      - Stephen Hawking                                        "...not the ability to exploit others."                                                  - OldCoder

Share this post


Link to post
Share on other sites

Awww, come on. Someone must know something about this? There are some purdy smart ppl on this board. :)


"Intelligence is the ability to adapt to change."                                      - Stephen Hawking                                        "...not the ability to exploit others."                                                  - OldCoder

Share this post


Link to post
Share on other sites

thats nothing, i cant even figure out how to export registry keys to file.reg

Share this post


Link to post
Share on other sites

#5 ·  Posted (edited)

try this

Run (@WindowsDir & '\regedit.exe /E "file.reg" "HKEY_LOCAL_MACHINE\SOFTWARE\Key"')

people here are not very friendly with those who try to mess with secure stuff like me.

I dont plan to hack anyone i just want to make my life easier by hacking my own computer and giving ppl tools so they can do same. (plus all tools have source code caz i have nothing to hide)

Edited by lessstoopid

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0