Follow us on Twitter!
Ideas are far more powerful than guns.
Tuesday, May 31, 2016
Navigation
Home
 Find:
 Information:
Learn
Communicate
Submit
Shop
Challenges
 Exploit:
 Programming:
 Think:
 Track:
 Patch:
 Other:
 Need Help?
Other
Members Online
Total Online: 39
Guests Online: 32
Members Online: 7

Registered Members: 93902
Newest Member: mandruk1331
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Questions

Author

Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 13:25
Hi all Smile , i would like to know if it is possible to hide a registry key ???
I have to hook the API function : RegOpenKeyEx / RegQueryValueEx , or there is a more simple way to do it ?
Thanks.
w4kfu.




Edited by on 15-04-09 13:30
Author

RE: Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 14:51
I don't know if this is what you are looking for, but i know that you can hide registry values simply using very long names for it.
If you overflow the MAX_LENGTH constant (if is longer than 260 bytes), the Regedit utility won't show these Registry values, but they're still there.

I found this info here


Author

RE: Hide Regkey


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 15-04-09 16:32
Very interesting vulnerability , thanks for the info Cyph3rHell.
Consequently for viewing this "hidden" registry value , we shouldn't not use the regedit utility , it is similar to hook the API function.
Yet this will be sufficient Smile , i will not have to program an another "driver".
I am open to other ways to do this.