Re: [Plugins-writers] Accessing multiple sub keys in the Windows registery

From: jfvanmeter@private
Date: Thu Apr 06 2006 - 06:04:46 PDT


Would this work to to enumerate all the keys below a specified key and store the values? when i run nasl -t localhost appid.nasl I dont' receive any errors, thanks in advance --John

RegistryLocation = "AppID\.Default";
Text1 = ReadRegistry(HKEY_CLASSES_ROOT, RegistryLocation, "");
Res = ReadRegistryGetSubkey(HKEY_CLASSES_ROOT, "AppID", i);
Do Until Res = "Not Found"
   Text1.Text = Text1.Text & " " & Res
   i = i + 1
   Res = ReadRegistryGetSubkey(HKEY_CLASSES_ROOT, "AppID", i);

-------------- Original message -------------- 
From: jfvanmeter@private 

Hello, I'm looking for someone to point me in the right direction on a problem that I"m having. 

I'm trying to write a plugin that will open the following registery key
 HKEY_CLASSES_ROOT\AppID

then look at all subkeys looking for and record the following Values
LaunchPermission (Reg_Bin)
RunAs (Reg_Sz)

I'm having the problem recording the AppID of the subkey, then dumping all the subkeys that contain LaunchPermission and RunAs Values
Example HKEY_CLASSES_ROOT\AppID\{0C155DD2-B99E-4702-9DCC-1BFA042FEE4F}
AppID = 0C155DD2-B99E-4702-9DCC-1BFA042FEE4F
LaunchPermissions = (a very long binary string that changes according to the RunAs Value)
RunAs = Interactive, System, User, Domain Administrators

If someone can point me in the right direction that would really help me out.

Thanks --John



attached mail follows:


_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers


_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Thu Apr 06 2006 - 06:05:28 PDT