使用REGINI修改注册表权限
regini regset.ini 就行啦
regset.ini 是你要修改的数据
1、注册表修改
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
test =
c:\windows\system32\fucktheworld.exe
2、注册表权限修改
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run []
usage: REGINI [-m machinename | -h hivefile hiveroot | -w Win95 Directory]
[-i n] [-o outputWidth]
[-b] textFiles...
where: -m specifies a
remote windows NT machine whose registry is to be manipula
ted.
-h
specifies a specify local hive to manipulate.
-w specifies the paths to a
windows 95 system.dat and user.dat files
-i n specifies the display
indentation multiple. Default is 4
-o outputWidth specifies how wide the
output is to be. By default the
outputWidth is set to the width of the
console window if standard
output has not been redirected to a file. In the
latter case, an
outputWidth of 240 is used.
-b specifies that REGINI
should be backward compatible with older
versions of REGINI that did not
strictly enforce line continuations
and quoted strings Specifically,
REG_BINARY, REG_RESOURCE_LIST and
REG_RESOURCE_REQUIREMENTS_LIST data types
did not need line
continuations after the first number that gave the size of
the data.
It just kept looking on following lines until it found enough data
values to equal the data length or hit invalid input. Quoted
strings
were only allowed in REG_MULTI_SZ. They could not be
specified around key or
value names, or around values for REG_SZ or
REG_EXPAND_SZ Finally, the old
REGINI did not support the semicolon
as an end of line comment character.
textFiles is one or more ANSI or Unicode text files with registry data.
The easiest way to understand the format of the input textFile is to use
the REGDMP command with no arguments to dump the current contents of
your NT Registry to standard out. Redirect standard out to a file and
this file is acceptable as input to REGINI
Some general rules are:
Semicolon character is an end-of-line comment character, provided it
is
the first non-blank character on a line
Backslash character is a line
continuation character. All
characters from the backslash up to but not
including the first
non-blank character of the next line are ignored. If
there is more
than one space before the line continuation character, it is
replaced by a single space.
Indentation is used to indicate the tree
structure of registry keys
The REGDMP program uses indentation in multiples
of 4. You may use
hard tab characters for indentation, but embedded hard tab
characters are converted to a single space regardless of their
position
Values should come before child keys, as they are associated with
the previous key at or above the value's indentation level.
For key
names, leading and trailing space characters are ignored and
not included in
the key name, unless the key name is surrounded by
quotes. Imbedded spaces
are part of a key name.
Key names can be followed by an Access Control
List (ACL) which is a
series of decimal numbers, separated by spaces,
bracketed by a
square brackets (e.g. [8 4 17]). The valid numbers and their
meanings are:
1 - Administrators Full Access
2 - Administrators Read Access
3 - Administrators Read and Write Access
4 - Administrators Read, Write and Delete Access
5 - Creator Full Access
6 - Creator Read and Write Access
7 - World Full Access
8 - World
Read Access
9 - World Read and Write Access
10 - World Read, Write and
Delete Access
11 - Power Users Full Access
12 - Power Users Read and
Write Access
13 - Power Users Read, Write and Delete Access
14 - System
Operators Full Access
15 - System Operators Read and Write Access
16 -
System Operators Read, Write and Delete Access
17 - System Full Access
18 - System Read and Write Access
19 - System Read Access
20 -
Administrators Read, Write and Execute Access
21 - Interactive User Full
Access
22 - Interactive User Read and Write Access
23 - Interactive User
Read, Write and Delete Access
If there is an equal sign on the same line
as a left square bracket
then the equal sign takes precedence, and the line
is treated as a
registry value. If the text between the square brackets is
the
string DELETE with no spaces, then REGINI will delete the key and
any values and keys under it.
For registry values, the syntax
is:
value Name = type data
Leading spaces, spaces on either side
of the equal sign and spaces
between the type keyword and data are ignored,
unless the value name
is surrounded by quotes. If the text to the right of
the equal sign
is the string DELETE, then REGINI will delete the value.
The value name may be left off or be specified by an at-sign
character which is the same thing, namely the empty value name. So
the
following two lines are identical:
= type data
@ = type data
This syntax means that you can't create a value with leading or
trailing spaces, an equal sign or an at-sign in the value name,
unless
you put the name in quotes.
Valid value types and format of data that
follows are:
REG_SZ text
REG_EXPAND_SZ text
REG_MULTI_SZ "string1" "str""ing2" ...
REG_DATE
mm/dd/yyyy HH:MM DayOfWeek
REG_DWORD numberDWORD
REG_BINARY
numberOfBytes numberDWORD(s)...
REG_NONE (same format as REG_BINARY)
REG_RESOURCE_LIST (same format as REG_BINARY)
REG_RESOURCE_REQUIREMENTS
(same format as REG_BINARY)
REG_RESOURCE_REQUIREMENTS_LIST (same format as
REG_BINARY)
REG_FULL_RESOURCE_DESCRIPTOR (same format as REG_BINARY)
REG_QWORD numberQWORD
REG_MULTISZ_FILE fileName
REG_BINARYFILE
fileName
If no value type is specified, default is REG_SZ
For
REG_SZ and REG_EXPAND_SZ, if you want leading or trailing spaces
in the
value text, surround the text with quotes. The value text
can contain any
number of imbedded quotes, and REGINI will ignore
them, as it only looks at
the first and last character for quote
characters.
For REG_MULTI_SZ,
each component string is surrounded by quotes. If
you want an imbedded quote
character, then double quote it, as in
string2 above.
For
REG_BINARY, the value data consists of one or more numbers The
default base
for numbers is decimal. Hexidecimal may be specified
by using 0x prefix. The
first number is the number of data bytes,
excluding the first number. After
the first number must come enough
numbers to fill the value. Each number
represents one DWORD or 4
bytes. So if the first number was 0x5 you would
need two more
numbers after that to fill the 5 bytes. The high order 3 bytes
of the second DWORD would be ignored.
Whenever specifying a registry
path, either on the command line
or in an input file, the following prefix
strings can be used:
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_USER
USER:
Each of these strings can stand alone as
the key name or be followed
a backslash and a subkey path.
REGINI:
No textFile specified
使用REGINI修改注册表权限的更多相关文章
- Windows删除/修改注册表权限不足的解决方法
在注册表的某些关键项(譬如:System.Root),连Administrator都没有权限进行修改,因为只有“system”有权限. [警告]切勿企图进行注册表上层权限覆盖低层权限的方式来使Admi ...
- Win7,Vista UAC下应用程序标注为“需要管理员权限”的四种方法(可以修改注册表)
[转]Vista UAC下应用程序标注为“需要管理员权限”的四种方法 在Microsoft 的UACBlog里对此有过叙述.总结如下: 首先,如果一个程序被识别为管理员程序时,Vista会在它的图标上 ...
- C#综合揭秘——通过修改注册表建立Windows自定义协议
引言 本文主要介绍注册表的概念与其相关根项的功能,以及浏览器如何通过连接调用自定义协议并与客户端进行数据通信.文中讲及如何通过C#程序.手动修改.安装项目等不同方式对注册表进行修改.其中通过安装项目对 ...
- 【转】C#综合揭秘——通过修改注册表建立Windows自定义协议
引言 本文主要介绍注册表的概念与其相关根项的功能,以及浏览器如何通过连接调用自定义协议并与客户端进行数据通信.文中讲及如何通过C#程序.手动修改.安装项目等不同方式对注册表进行修改.其中通过安装项目对 ...
- JavaScript修改注册表
JavaScript修改注册表 2009-04-14 11:22:13| 分类: JS相关 | 标签: |字号大中小 订阅 注册表有关安全设置项的说明: 注册表路径: HKEY_CURRE ...
- C#修改注册表
某次需要使用C#对注册表进行操作,不过却发现没有权限,研究了以下发现是当前系统用户的问题.除非当前系统用户是Administrator,否则就会给你抛出一个异常.后来在网上发现了一个方法,原来C#也可 ...
- 通过修改注册表建立Windows自定义协议
引言 本文主要介绍注册表的概念与其相关根项的功能,以及浏览器如何通过连接调用自定义协议并与客户端进行数据通信.文中讲及如何通过C#程序.手动修改.安装项目等不同方式对注册表进行修改.其中通过安装项目对 ...
- 手工修改注册表激活windows xp法
手工修改注册表激活windows xp法: 1.安装原版windows xp 2.打开注册表regedit 3.找到主键 Hkey_Local_Machine\Software\Microsoft\W ...
- C#高级编程笔记(22至25章节)文件\注册表\权限\事务
22安全(using System.Security.Principal;) AppDomain.CurrentDomain.SetPrincipalPolicy(PrincipalPolicy.Wi ...
随机推荐
- YUV和RGB之间的转换方法
yCbCr<-->rgb Y’ = 0.257*R' + 0.504*G' + 0.098*B' + 16 Cb Cr R) G) - 0.392*(Cb'-128) B) 参考: htt ...
- git server side hook 试用
git 的hook 是一个很方便的功能,我们可以使用hook 做好多处理,比如client side hook 进行 提交格式校验,server side 进行ci/cd 处理 测试使用docker- ...
- 使用 mysqldump 备份时的一些参数
因为还没有用到 ThinkPHP 的迁移组件,暂时使用 mysqldump 来备份,并版本控制. 有几个参数需要用到. --skip-dump-date 不要完成时间. --skip-extended ...
- task optimization
Requirements: Tasks have Dependencies Running the task in Multi thread Links http://en.wikipedia.org ...
- vue-cli、webpack提取第三方库-----DllPlugin、DllReferencePlugin
需要安装的插件有 extract-text-webpack-plugin assets-webpack-plugin clean-webpack-plugin npm install extract- ...
- C# 文本框只能输入数字和退格键 (转)
C# 文本框只能输入数字和退格键 private void TextBox_KeyPress(object sender, KeyPressEventArgs e) { if(e.Key ...
- RabbitMQ-1 Helloword
参考:http://rabbitmq.mr-ping.com/ 介绍 RabbitMQ是一个消息代理.它的工作就是接收和转发消息.你可以把它想像成一个邮局:你把信件放入邮箱,邮递员就会把信件投递到你的 ...
- 2018-2019 20165226 Exp6 信息搜集与漏洞扫描
2018-2019 20165226 Exp6 信息搜集与漏洞扫描 目录 一.实验内容说明及基础问题回答 二.实验过程 Task1 各种搜索技巧的应用 检测特定类型的文件 搜索网址目录结构 trace ...
- java学习——类之YuanZhu
package hello; import java.util.Scanner; public class YuanZhu { public static void main(String[] arg ...
- LightGBM优势总结
效率和内存上的提升 1) 在训练决策树计算切分点的增益时,xgboost采用预排序,即需要对每个样本的切分位置都要计算一遍,所以时间复杂度是O(#data). 而LightGBM则是将样本离散化为直方 ...