registry

package
v1.0.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 17, 2025 License: GPL-3.0 Imports: 19 Imported by: 0

README

client/command/registry

Overview

Implements the 'registry' command group for the Sliver client console. Handlers map Cobra invocations to registry workflows such as REG create, REG delete, REG list, and REG read.

Go Files

  • commands.go – Exposes registry management commands for Windows targets.
  • reg-create.go – Creates new registry keys or values remotely.
  • reg-delete.go – Deletes registry keys/values with confirmation messaging.
  • reg-list.go – Enumerates registry subkeys and values for a provided path.
  • reg-read.go – Reads and prints registry value data.
  • reg-write.go – Writes registry values with type handling for supported data kinds.

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func Commands

func Commands(con *console.SliverClient) []*cobra.Command

Commands returns the “ command and its subcommands.

func PrintCreateKey

func PrintCreateKey(createKey *sliverpb.RegistryCreateKey, regPath string, key string, con *console.SliverClient)

PrintCreateKey - Print the results of the create key command

func PrintDeleteKey

func PrintDeleteKey(deleteKey *sliverpb.RegistryDeleteKey, regPath string, key string, con *console.SliverClient)

PrintDeleteKey - Print the results of the delete key command

func PrintListSubKeys

func PrintListSubKeys(regList *sliverpb.RegistrySubKeyList, hive string, regPath string, con *console.SliverClient)

PrintListSubKeys - Print the list sub keys command result

func PrintListValues

func PrintListValues(regList *sliverpb.RegistryValuesList, hive string, regPath string, con *console.SliverClient)

PrintListValues - Print the registry list values

func PrintRegRead

func PrintRegRead(regRead *sliverpb.RegistryRead, con *console.SliverClient)

PrintRegRead - Print the results of the registry read command

func PrintRegWrite

func PrintRegWrite(regWrite *sliverpb.RegistryWrite, con *console.SliverClient)

PrintRegWrite - Print the registry write operation

func RegCreateKeyCmd

func RegCreateKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegCreateKeyCmd - Create a new Windows registry key

func RegDeleteKeyCmd

func RegDeleteKeyCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegDeleteKeyCmd - Remove a Windows registry key

func RegListSubKeysCmd

func RegListSubKeysCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegListSubKeysCmd - List sub registry keys

func RegListValuesCmd

func RegListValuesCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegListValuesCmd - List registry values

func RegReadCmd

func RegReadCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegReadCmd - Read a windows registry key: registry read --hostname aa.bc.local --hive HKCU "software\google\chrome\blbeacon\version"

func RegReadHiveCommand

func RegReadHiveCommand(cmd *cobra.Command, con *console.SliverClient, args []string)

func RegWriteCmd

func RegWriteCmd(cmd *cobra.Command, con *console.SliverClient, args []string)

RegWriteCmd - Write to a Windows registry key: registry write --hive HKCU --type dword "software\google\chrome\blbeacon\hello" 32

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL