NAME¶

regshell - Windows registry file browser using readline

SYNOPSIS¶

regshell [--help] [--backend=BACKEND] [--credentials=CREDENTIALS] [location]

DESCRIPTION¶

regshell is a utility that lets you browse thru a Windows registry file as if you were using a regular unix shell to browse thru a file system.

OPTIONS¶

--help

--backend BACKEND

--credentials=CREDENTIALS

COMMANDS¶

ck|cd <keyname>

ch|predef [predefined-key-name]

list|ls

mkkey|mkdir <keyname>

rmval|rm <valname>

rmkey|rmdir <keyname>

pwd|pwk

set|update

help|?

exit|quit

EXAMPLES¶

Browsing thru a nt4 registry file

regshell -b nt4 NTUSER.DAT
$$$PROTO.HIV> ls
K AppEvents
K Console
K Control Panel
K Environment
K Identities
K Keyboard Layout
K Network
K Printers
K Software
K UNICODE Program Groups
K Windows 3.1 Migration Status
$$$PROTO.HIV> exit

Listing the subkeys of HKEY_CURRENT_USER\AppEvents on a remote computer:

regshell --remote=ncacn_np:aurelia -c "jelmer%secret"
HKEY_CURRENT_MACHINE> predef HKEY_CURRENT_USER
HKEY_CURRENT_USER> cd AppEvents
Current path is: HKEY_CURRENT_USER\AppEvents
HKEY_CURRENT_USER\AppEvents> ls
K EventLabels
K Schemes
HKEY_CURRENT_USER\AppEvents> exit

VERSION¶

This man page is correct for version 4.0 of the Samba suite.

SEE ALSO¶

regtree, regdiff, regpatch, gregedit, samba

AUTHOR¶

This utility is part of the Samba[1] suite, which is developed by the global Samba Team[2].

This manpage and regshell were written by Jelmer Vernooij.

NOTES¶

1.

Samba

2.

Samba Team