Affected by 
README
¶
client/command/registry
Overview
Implements the 'registry' command group for the Sliver client console. Handlers map Cobra invocations to registry workflows such as REG create, REG delete, REG list, and REG read.
Go Files
commands.go– Exposes registry management commands for Windows targets.reg-create.go– Creates new registry keys or values remotely.reg-delete.go– Deletes registry keys/values with confirmation messaging.reg-list.go– Enumerates registry subkeys and values for a provided path.reg-read.go– Reads and prints registry value data.reg-write.go– Writes registry values with type handling for supported data kinds.
Documentation
¶
Index ¶
- func Commands(con *console.SliverClient) []*cobra.Command
- func PrintCreateKey(createKey *sliverpb.RegistryCreateKey, regPath string, key string, ...)
- func PrintDeleteKey(deleteKey *sliverpb.RegistryDeleteKey, regPath string, key string, ...)
- func PrintListSubKeys(regList *sliverpb.RegistrySubKeyList, hive string, regPath string, ...)
- func PrintListValues(regList *sliverpb.RegistryValuesList, hive string, regPath string, ...)
- func PrintRegRead(regRead *sliverpb.RegistryRead, con *console.SliverClient)
- func PrintRegWrite(regWrite *sliverpb.RegistryWrite, con *console.SliverClient)
- func RegCreateKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegDeleteKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegListSubKeysCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegListValuesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegReadCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegReadHiveCommand(cmd *cobra.Command, con *console.SliverClient, args []string)
- func RegWriteCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Commands ¶ added in v1.6.0
func Commands(con *console.SliverClient) []*cobra.Command
Commands returns the “ command and its subcommands.
func PrintCreateKey ¶ added in v1.5.0
func PrintCreateKey(createKey *sliverpb.RegistryCreateKey, regPath string, key string, con *console.SliverClient)
PrintCreateKey - Print the results of the create key command
func PrintDeleteKey ¶ added in v1.5.0
func PrintDeleteKey(deleteKey *sliverpb.RegistryDeleteKey, regPath string, key string, con *console.SliverClient)
PrintDeleteKey - Print the results of the delete key command
func PrintListSubKeys ¶ added in v1.5.0
func PrintListSubKeys(regList *sliverpb.RegistrySubKeyList, hive string, regPath string, con *console.SliverClient)
PrintListSubKeys - Print the list sub keys command result
func PrintListValues ¶ added in v1.5.0
func PrintListValues(regList *sliverpb.RegistryValuesList, hive string, regPath string, con *console.SliverClient)
PrintListValues - Print the registry list values
func PrintRegRead ¶ added in v1.5.0
func PrintRegRead(regRead *sliverpb.RegistryRead, con *console.SliverClient)
PrintRegRead - Print the results of the registry read command
func PrintRegWrite ¶ added in v1.5.0
func PrintRegWrite(regWrite *sliverpb.RegistryWrite, con *console.SliverClient)
PrintRegWrite - Print the registry write operation
func RegCreateKeyCmd ¶
func RegCreateKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegCreateKeyCmd - Create a new Windows registry key
func RegDeleteKeyCmd ¶ added in v1.5.0
func RegDeleteKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegDeleteKeyCmd - Remove a Windows registry key
func RegListSubKeysCmd ¶ added in v1.4.21
func RegListSubKeysCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegListSubKeysCmd - List sub registry keys
func RegListValuesCmd ¶ added in v1.4.21
func RegListValuesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegListValuesCmd - List registry values
func RegReadCmd ¶
func RegReadCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegReadCmd - Read a windows registry key: registry read --hostname aa.bc.local --hive HKCU "software\google\chrome\blbeacon\version"
func RegReadHiveCommand ¶ added in v1.6.0
func RegReadHiveCommand(cmd *cobra.Command, con *console.SliverClient, args []string)
func RegWriteCmd ¶
func RegWriteCmd(cmd *cobra.Command, con *console.SliverClient, args []string)
RegWriteCmd - Write to a Windows registry key: registry write --hive HKCU --type dword "software\google\chrome\blbeacon\hello" 32
Types ¶
This section is empty.
Source Files