Vulnerability Development mailing list archives
Re: File Share Vacuum
From: Inedag () AOL COM (Inedag () AOL COM)
Date: Sun, 30 Jan 2000 22:17:00 EST
In a message dated 1/30/2000 9:55:15 AM Pacific Standard Time, dim () XS4ALL NL writes:
If the target user(s) are using Windows 9x, why not just download C:\Windows\System.dat C:\Windows\User.dat
Ugh! I just checked mine and together they amount to over 6mb. Besides, most of the registry is useless garbage. There is interesting stuff in there, it's just not necessary to get all of it (if possible).
These files contain most or all of the Windows 9x registry (dependent on whether user profiles are enabled or not), and can be readily dumped into ASCII using RegEdit. Windows 9x does NOT keep these files locked when using them, so you can read/download them without any problem. This is (alas) not possible on NT, AFAIK... You can also try: C:\Windows\System.da0 (registry backup file for Win95) C:\Windows\User.da0 ( " ) C:\Windows\SysBckup\rb000.cab (registry backup file for Win98) C:\Windows\SysBckup\rb001.cab ( " )
You mean, %WINDIR%\.... hardcoding paths is bad. -i
Current thread:
- Re: File Share Vacuum Brooke, O'Neil (Jan 28)
- <Possible follow-ups>
- Re: File Share Vacuum John Simons (Jan 28)
- Re: File Share Vacuum Inedag () AOL COM (Jan 30)
