Hi all , i would like to know if it is possible to hide a registry key ???
I have to hook the API function : RegOpenKeyEx / RegQueryValueEx , or there is a more simple way to do it ?
Edited by on 15-04-09 13:30
RE: Hide Regkey
Posts: Location: Joined: 01.01.70 Rank: Guest
Posted on 15-04-09 14:51
I don't know if this is what you are looking for, but i know that you can hide registry values simply using very long names for it.
If you overflow the MAX_LENGTH constant (if is longer than 260 bytes), the Regedit utility won't show these Registry values, but they're still there.
Very interesting vulnerability , thanks for the info Cyph3rHell.
Consequently for viewing this "hidden" registry value , we shouldn't not use the regedit utility , it is similar to hook the API function.
Yet this will be sufficient , i will not have to program an another "driver".
I am open to other ways to do this.
Hellbound Hackers is the collective work of the staff and the community and is therefore licensed under the CC BY-NC-SA license.