o Žõ±j- ã@s:ddlZddlZddlmZddlmZGdd„dƒZdS)éN)Úlogger)ÚUniversalEncoderc@s<eZdZdd„Zdd„Zdd„Zdd„Zd d „Zd d „Zd S)ÚRegistryCMDHelpercCsdg|_dg|_dS)NÚregistry)Ú live_keywordsÚkeywords)Úself©r úŽ/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/pypykatz/registry/cmdhelper.pyÚ__init__s zRegistryCMDHelper.__init__cCs˜|jddd}|jdddd|jdd d d|jdd d}|jd d d|jddd|jddd|jddd|jdd d d|jdddddS)NrzGet all secrets from registry)Úhelpz--jsonÚ store_truez Print credentials in JSON format)Úactionr z-oz --outfilez[Save results to file (you can specify --json for json file, or text format will be written)zGet secrets from registry filesÚsystemz path to the SYSTEM registry hivez--samzpath to the SAM registry hivez --securityz"path to the SECURITY registry hivez --softwarez"path to the SOFTWARE registry hive)Ú add_parserÚ add_argument)rÚparserÚ live_parserÚ live_groupÚgroupr r r Úadd_argsszRegistryCMDHelper.add_argscCsbt|jƒdkr|j|jvr| |¡t|jƒdkr+|jdkr-|j|jvr/| |¡dSdSdSdS)NrÚlive)ÚlenrÚcommandÚrunrÚmoduleÚrun_live)rÚargsr r r Úexecute!s  $ ÿzRegistryCMDHelper.executecCsN|jr | |j|j¡dS|jrttj| ¡tdddƒdStt|ƒƒdS)NéT)ÚclsÚindentÚ sort_keys)ÚoutfileÚto_fileÚjsonÚprintÚdumpsÚto_dictrÚstr)rÚresultsrr r r Úprocess_results(s z!RegistryCMDHelper.process_resultsc CsÈddlm}d}z| ¡}WnCtyQ}z7t ¡t dt|ƒ¡z ddl m }|  ¡}WntyF}z t d¡WYd}~nd}~wwWYd}~nd}~ww|dur^|  ||¡dSt dƒdS)Nr)Ú LiveRegistryzPFailed to obtain registry secrets via direct registry reading method. Reason: %s©ÚOffineRegistryz5Failed to obtain registry secrets via filedump methodzRegistry parsing failed!)Úpypykatz.registry.live_parserr,Úgo_liveÚ ExceptionÚ tracebackÚ print_excrÚdebugr)Ú pypykatz.registry.offline_parserr.Úfrom_live_systemr+r&)rrr,ÚlrÚer.r r r r1s&    €ÿ€ú  zRegistryCMDHelper.run_livecCs4ddlm}| |j|j|j|j¡}| ||¡dS)Nrr-)r5r.Ú from_filesrÚsamÚsecurityÚsoftwarer+)rrr.Úpor r r rDs zRegistryCMDHelper.runN) Ú__name__Ú __module__Ú __qualname__r rrr+rrr r r r rs  r)r%r2ÚpypykatzrÚpypykatz.commons.commonrrr r r r Ús