chvancooten / NimPlant

A light-weight first-stage C2 implant written in Nim.
MIT License
779 stars 109 forks source link

Reg Command does not work #6

Closed vysecurity closed 1 year ago

vysecurity commented 1 year ago

Issue Description

Reg command appears to not work: Brave Browser-2023-02-21 at 11 59 46@2x

Nor does: reg query HKCU Software

chvancooten commented 1 year ago

Have you tried escaping the backslashes?

Also, please use the issue template best time 🙂

vysecurity commented 1 year ago

Yes tried escaping the \ with \.

chvancooten commented 1 year ago

Thanks for the report. Was able to reproduce, and fixed in https://github.com/chvancooten/NimPlant/commit/91da37781b8422e3d68c5a9430aea192db5f2fea. Ended up replacing the entire registry library since the Nim stdlib is quite lacking. Now the command properly supports enumerating all values in a certain key.

image

vysecurity commented 1 year ago

Fantastic!