Re: Null Terminated Strings

From: Ansgar -59cobalt- Wiechers (bugtraq_at_planetcobalt.net)
Date: 06/29/05

  • Next message: Tim Hayes: "RE: Restricting Incoming Email in Exchange by From Address" 
    Date: Wed, 29 Jun 2005 11:29:23 +0200
To: security-basics@securityfocus.com

    On 2005-06-27 ChayoteMu wrote:
    > I'm not sure if it'd work because I haven't tried it, but if you're
    > feeling brave you could try to export the registry, then go through
    > the export file and remove the key from there. Then import the fixed
    > reg file. It sounds doable, but I don't know what the exported reg
    > file looks like sp I don't know what's involved in all of that, but
    > I'll give it a shot tonight.

    Importing a .reg file that doesn't contain a specific key surely won't
    make that key disappear in the registry. That wouldn't make any sense.
    However, creating and importing a .reg file like this may do the trick:

    ----8<----
    REGEDIT4

    [-HKLM\Your\Invisible\Key]

    ---->8----

    Another option may be starting regedit with SYSTEM privileges (e.g. by
    using the "at" command as an administrator) and checking the ACLs of the
    key in question.

    Regards
    Ansgar Wiechers 

    -- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq
  • Next message: Tim Hayes: "RE: Restricting Incoming Email in Exchange by From Address"

    Relevant Pages

    • Re: Using IE6 as a FTP client
      ... Before importing the reg file, I did not have the FeatureControl ... folder under Main in my registry. ... I will see all the contents of the folder WRCEJ1191171 in a web browser. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: Null Terminated Strings
      ... The full part of my idea was either to wipe the registry then ... import the one without the hidden key or to make a reg file like you ... creating and importing a .reg file like this may do the trick: ... To catch a master thief, ...
      (Security-Basics)
    • Re: Edit Default User NTUSER.DAT
      ... No it's not using Terminal Services, ... importing the reg file in the login script to the current ...
      (microsoft.public.win2000.security)
    • Re: Shortcut creation changed -what did I do?
      ... I'm able to extract the .REG file, and can merge the contents to the ... Perhaps you can try opening Regedit.exe and try importing the REG ...
      (microsoft.public.windowsxp.configuration_manage)
    • Re: How to change regional settings (date format) from command line ?
      ... A "kludge" way of doing it, no doubt, but one way that I can think of is by importing the settings to the registy. ... It's a "per User" setting so it's held in the registry's HKCU key. ... You can use Regedit.exe and a .reg file to import the setting to the key. ...
      (microsoft.public.win2000.general)