Thoughts Decoded

The registry is the backbone of windows O.S. It is a hierarchical or tree database in windows O.S that virtually stores all the information about computer configuration. It’s pretty similar to windows explorer which is two pane split window, one showing hierarchy and another detailed information.

It is made up of two files :
1. user.dat
2. system.dat

Significance of windows registry:
Windows registry determines the look, tool and working of windows system in a similar way to the genes {DNA and RNA} determining the look and feel of human beings.

To control the h/w,s/w,look,feel,features and functionality one has to master the registry. So mastering the registry one can control not only control the whole computer but also its network. The current version of windows has registry which has all the setting that were previously contained in config.sys, autoexec.bat, win.ini etc present in older version of windows.

Windows registry thus is the key to improve the security from hacker’s perspective. The funny prank part of registry serves as icing for cake.

Registry gives us the platform to use the loopholes and abstract the data and make the h/w and s/w function the way we want them to do even when connected to network for security purposes.

Examples: one can disable run and search functions so that crackers cannot gain its access to carry out malicious activity. Locking certain drives having sensitive data. Disabling registry tool after giving a good security through it so that the settings becomes permanent.

The registry differs from version to version of windows so right kind of windows version must be used, e.g. Windows NT has huge scope for applying different tweaks.

To get different registry tweaks to improve the performance of P.C for making full use of registry’s ability visit websites:
www.regedit.com
www.winguides.com

So, the registry is very important if we are thinking of Hacking windows

Address for windows registry and data stored:
Registry is in windows directory or folder by the name regedit which is executable file. The organizes data in keys and sub-keys.

We can open the registry by,
Start> Run> regedit
Or Start> Run> c:\ windows\regedit.exe
Or Start> Run> regedit32.exe (under Win NT)

The registry is actually organized into keys and subkeys. Each key contains a value entry; each one has a name, a type or a class and the value itself. The name is a string that identifies the value to the key. The length and the format of the value is dependent on the data type.

Registry editor is divided into five principal keys or hives:
HKEY_LOCAL_MACHINE
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_USERS
There is no way to add or delete at this level.

Only two of these keys are effectively saved on hard disc:
HKEY_LOCAL_MACHINE & HKEY_USERS.

The others are just branches of the main keys or are dynamically created by windows.

Important note before editing registry:
Since, registry is the core of OS, we should back up the copy of it on floppy, each time we attempt any changes or modifications in the windows registry otherwise, we may need to reinstall the OS, if there happens any mistake.

My favourite pick from all reg tweaks:
Add Command Prompt Option to Every Folder (All Windows) Popular
If you still use the DOS prompt regularly then this setting creates a new right-click menu option to open a command prompt at the selected directory.
Open your registry and find the key below.

Create a new sub key called ‘Command’ under the main key (i.e. [HKEY_CLASSES_ROOT\Directory\shell\Command]). Change the value of ‘(Default)’ within the key to equal the text you would like on the right-click menu, for example ‘Command Prompt’.

Create another new sub-key under the key created above, named ‘command’ (i.e. [HKEY_CLASSES_ROOT\...\Command\command]).

Change the value of ‘(Default)’ within this key depending on your operating system to equal either:

Windows 95, 98 or Me
command.com /k cd “%1″
or
Windows NT, 2000 or XP
cmd.exe /k cd %1
Now right-click on a folder and the new option of ‘Command Prompt’ should be available.

Registry Settings
System Key: [HKEY_CLASSES_ROOT\Directory\shell]
Value Name: (Default)
Data Type: REG_SZ (String Value)