regshell(1)

1REGSHELL(1)               System Administration tools              REGSHELL(1)
2
3
4

NAME

6       regshell - Windows registry file browser using readline
7

SYNOPSIS

9       regshell [--help] [--backend=BACKEND] [--credentials=CREDENTIALS]
10                [location]
11

DESCRIPTION

13       regshell is a utility that lets you browse thru a Windows registry file
14       as if you were using a regular unix shell to browse thru a file system.
15

OPTIONS

17       --help
18           Show list of available options.
19
20       --backend BACKEND
21           Name of backend to load. Possible values are: creg, regf, dir and
22           rpc. The default is dir.
23
24       --credentials=CREDENTIALS
25           Credentials to use, if any. Password should be separated from user
26           name by a percent sign.
27

COMMANDS

29       ck|cd <keyname>
30           Go to the specified subkey.
31
32       ch|predef [predefined-key-name]
33           Go to the specified predefined key.
34
35       list|ls
36           List subkeys and values of the current key.
37
38       mkkey|mkdir <keyname>
39           Create a key with the specified keyname as a subkey of the current
40           key.
41
42       rmval|rm <valname>
43           Delete the specified value.
44
45       rmkey|rmdir <keyname>
46           Delete the specified subkey recursively.
47
48       pwd|pwk
49           Print the full name of the current key.
50
51       set|update
52           Update the value of a key value. Not implemented at the moment.
53
54       help|?
55           Print a list of available commands.
56
57       exit|quit
58           Leave regshell.
59

EXAMPLES

61       Browsing thru a nt4 registry file
62
63           regshell -b nt4 NTUSER.DAT
64           $$$PROTO.HIV> ls
65           K AppEvents
66           K Console
67           K Control Panel
68           K Environment
69           K Identities
70           K Keyboard Layout
71           K Network
72           K Printers
73           K Software
74           K UNICODE Program Groups
75           K Windows 3.1 Migration Status
76           $$$PROTO.HIV> exit
77
78       Listing the subkeys of HKEY_CURRENT_USER\AppEvents on a remote
79       computer:
80
81           regshell --remote=ncacn_np:aurelia -c "jelmer%secret"
82           HKEY_CURRENT_MACHINE> predef HKEY_CURRENT_USER
83           HKEY_CURRENT_USER> cd AppEvents
84           Current path is: HKEY_CURRENT_USER\AppEvents
85           HKEY_CURRENT_USER\AppEvents> ls
86           K EventLabels
87           K Schemes
88           HKEY_CURRENT_USER\AppEvents> exit
89

VERSION

91       This man page is correct for version 4.0 of the Samba suite.
92

AUTHOR

97       This utility is part of the Samba[1] suite, which is developed by the
98       global Samba Team[2].
99
100       This manpage and regshell were written by Jelmer Vernooij.
101

NOTES

103        1. Samba
104           http://www.samba.org/
105
106        2. Samba Team
107           http://www.samba.org/samba/team/
108
109
110
111Samba 4.0                         11/30/2023                       REGSHELL(1)