https://github.com/p0dalirius/hivetools

A collection of python scripts to work with Windows Hives.
https://github.com/p0dalirius/hivetools

hive parse python tool windows

Last synced: about 1 month ago
JSON representation

A collection of python scripts to work with Windows Hives.

• Host: GitHub
• URL: https://github.com/p0dalirius/hivetools
• Owner: p0dalirius
• Created: 2022-02-21T08:00:31.000Z (almost 3 years ago)
• Default Branch: master
• Last Pushed: 2022-04-24T19:42:25.000Z (almost 3 years ago)
• Last Synced: 2024-12-18T18:50:10.469Z (about 2 months ago)
• Topics: hive, parse, python, tool, windows
• Language: Python
• Homepage: https://podalirius.net/
• Size: 15.9 MB
• Stars: 15
• Watchers: 2
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml

Awesome Lists containing this project

README

        
# Hivetools



   A collection of python scripts to work with Windows Hives.

   


   

   

   

  




![](./.github/json.png)

## Examples

 + Get a specific key in a hive:

    ```

    ./hive-get-keys.py -H ./examples/hives/SAM -k 'SAM\Domains\Builtin\Aliases\Members\S-1-5-21-877132822-430060850-1589397531\000001F4\(default)'

    ```

 + Exporting a hive to JSON:

    ```

    ./hive-to-json.py --hive ./examples/hives/SYSTEM -o ./examples/json/SYSTEM.json

    ```

## Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

## References

 - http://sentinelchicken.com/data/TheWindowsNTRegistryFileFormat.pdf

 - https://github.com/msuhanov/regf/blob/master/Windows%20registry%20file%20format%20specification.md