Vulnerability Development mailing list archives

Re: File Share Vacuum


From: Inedag () AOL COM (Inedag () AOL COM)
Date: Sun, 30 Jan 2000 22:17:00 EST


In a message dated 1/30/2000 9:55:15 AM Pacific Standard Time, dim () XS4ALL NL
writes:

If the target user(s) are using Windows 9x, why not just download

 C:\Windows\System.dat
 C:\Windows\User.dat

Ugh!  I just checked mine and together they amount to over 6mb.  Besides,
most of the registry is useless garbage.  There is interesting stuff in
there, it's just not necessary to get all of it (if possible).

 These files contain most or all of the Windows 9x registry (dependent
 on whether user profiles are enabled or not), and can be readily
 dumped into ASCII using RegEdit. Windows 9x does NOT keep these files
 locked when using them, so you can read/download them without any
 problem. This is (alas) not possible on NT, AFAIK...

 You can also try:
 C:\Windows\System.da0          (registry backup file for Win95)
 C:\Windows\User.da0            (              "               )
 C:\Windows\SysBckup\rb000.cab  (registry backup file for Win98)
 C:\Windows\SysBckup\rb001.cab  (              "               )

You mean, %WINDIR%\....  hardcoding paths is bad.

-i


Current thread: