Contents

# -*- coding: binary -*-
module Rex
module Registry

class RegfBlock

  attr_accessor :timestamp, :root_key_offset

  def initialize(hive)

    regf_header = hive[0x00, 4]

    if regf_header !~ /regf/
      puts "Not a registry hive"
      return
    end

    @timestamp = hive[0x0C, 8].unpack('q').first
    @root_key_offset = 0x20

  end
end

end
end

Version data entries

21 entries across 21 versions & 4 rubygems

Version	Path
rex-registry-0.1.5	lib/rex/registry/regf.rb
rex-registry-0.1.4	lib/rex/registry/regf.rb
rex-2.0.13	lib/rex/registry/regf.rb
rex-2.0.12	lib/rex/registry/regf.rb
rex-2.0.11	lib/rex/registry/regf.rb
rex-registry-0.1.3	lib/rex/registry/regf.rb
rex-registry-0.1.2	lib/rex/registry/regf.rb
rex-registry-0.1.1	lib/rex/registry/regf.rb
rex-registry-0.1.0	lib/rex/registry/regf.rb
rex-2.0.10	lib/rex/registry/regf.rb
rex-2.0.9	lib/rex/registry/regf.rb
rex-2.0.8	lib/rex/registry/regf.rb
rex-2.0.7	lib/rex/registry/regf.rb
rex-2.0.5	lib/rex/registry/regf.rb
rex-2.0.4	lib/rex/registry/regf.rb
dstruct-0.0.1	lib/rex/registry/regf.rb
rex-2.0.3	lib/rex/registry/regf.rb
librex-0.0.999	lib/rex/registry/regf.rb
rex-2.0.2	lib/rex/registry/regf.rb
librex-0.0.71	lib/rex/registry/regf.rb