REGSHELL(1) | System Administration tools | REGSHELL(1) |
regshell - Windows registry file browser using readline
regshell [--help] [--backend=BACKEND] [--credentials=CREDENTIALS] [location]
regshell is a utility that lets you browse thru a Windows registry file as if you were using a regular unix shell to browse thru a file system.
--help
--backend BACKEND
--credentials=CREDENTIALS
ck|cd <keyname>
ch|predef [predefined-key-name]
list|ls
mkkey|mkdir <keyname>
rmval|rm <valname>
rmkey|rmdir <keyname>
pwd|pwk
set|update
help|?
exit|quit
Browsing thru a nt4 registry file
regshell -b nt4 NTUSER.DAT $$$PROTO.HIV> ls K AppEvents K Console K Control Panel K Environment K Identities K Keyboard Layout K Network K Printers K Software K UNICODE Program Groups K Windows 3.1 Migration Status $$$PROTO.HIV> exit
Listing the subkeys of HKEY_CURRENT_USER\AppEvents on a remote computer:
regshell --remote=ncacn_np:aurelia -c "jelmer%secret" HKEY_CURRENT_MACHINE> predef HKEY_CURRENT_USER HKEY_CURRENT_USER> cd AppEvents Current path is: HKEY_CURRENT_USER\AppEvents HKEY_CURRENT_USER\AppEvents> ls K EventLabels K Schemes HKEY_CURRENT_USER\AppEvents> exit
This man page is correct for version 4.0 of the Samba suite.
regtree, regdiff, regpatch, gregedit, samba
This utility is part of the Samba[1] suite, which is developed by the global Samba Team[2].
This manpage and regshell were written by Jelmer Vernooij.
08/09/2022 | Samba 4.0 |