Follow us on Twitter!
Understanding is the answer, hatred is the problem, and hackers are the slaves abused and destroyed in the process of peace online - Deshouleres
Friday, April 18, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 26
Guests Online: 22
Members Online: 4

Registered Members: 82829
Newest Member: mmoclauq
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Questions

Author

Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 13:25
Hi all Smile , i would like to know if it is possible to hide a registry key ???
I have to hook the API function : RegOpenKeyEx / RegQueryValueEx , or there is a more simple way to do it ?
Thanks.
w4kfu.




Edited by on 15-04-09 13:30
Author

RE: Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 14:51
I don't know if this is what you are looking for, but i know that you can hide registry values simply using very long names for it.
If you overflow the MAX_LENGTH constant (if is longer than 260 bytes), the Regedit utility won't show these Registry values, but they're still there.

I found this info here


Author

RE: Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 16:32
Very interesting vulnerability , thanks for the info Cyph3rHell.
Consequently for viewing this "hidden" registry value , we shouldn't not use the regedit utility , it is similar to hook the API function.
Yet this will be sufficient Smile , i will not have to program an another "driver".
I am open to other ways to do this.