Ethical Hacking - Overview
Ethical Hacking- Windows Hacking & Security
Registry Editing in WINDOWS .
Windows Registry is a database containing all the settings and configurations used by services, applications and almost everything. The registry has two basic concepts to be aware of: Keys and Values. Registry Keys are objects that are basically folders, and in the interface even look exactly like folders. Values are a bit like the files in the folders, and they contain the actual settings.
When you open the Registry Editor for the first time, you’ll see a treeview on the left-hand pane that contains all of the keys, with values on the right-hand side.
It’s about as simple as an interface gets.
Windows uses this section to manage file type associations, and it is usually abbreviated HKCR when being referenced in documentation. This key is actually just a link to HKLM\Software\Classes.
Holds the user settings for the currently logged in user, and is usually abbreviated HKCU This is actually just a link to HKEY_USERS\<SID-FOR-CURRENT-USER>. The most important sub-key in here is HKCU\Software, which contains user-level settings for most of your software.
All of the system-wide settings are stored here, and it is usually abbreviated as HKLM. You’ll mostly use the HKLM\Software key to check machine-wide settings.
Stores all of the settings for all users on the system. You’ll typically use HKCU instead, but if you need to check settings for another user on your computer, you can use this one.
Stores all of the information about the current hardware configuration. This one isn’t used very often, and it just a link to HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\Current.
Exporting Registry Files
In order to open Registry Directory .Type ’regedit’ in run window as shown in the image
One can export the registries and all the values contained in it by Right-Clicking on them and choosing Export. Exporting is done in order to keep back-up of the registry file. Taking back-up of the registry file is so important because a little bit of mistake in editing this files may lead user to format its entire system again.
It is done so that even if one changed the file and mistook something ,he/she will be able to import the backed-up file in to the Registry Directory.