
Writeup 4 2020 - 之江杯 - 注册表分析知识点WiFi信息一般在这些注册表路径中SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\ProfilesSOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\UnmanagedSOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\Managed其中Profiles下面每个子项里通常有ProfileNameWiFi 名称Description网络描述Managed是否受管Category网络类别解题技巧如果注册表已经导出成.reg文本直接搜索ProfileName就能看到WiFi名。... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{6E6D2E56-BC24-47D5-8F55-8891506C0C3F}] ProfileNameOPPO Reno DescriptionOPPO Reno Manageddword:00000000 Categorydword:00000000 DateCreatedhex:e4,07,0c,00,00,00,0d,00,11,00,38,00,0d,00,53,00 NameTypedword:00000047 DateLastConnectedhex:e4,07,0c,00,00,00,0d,00,11,00,38,00,0d,00,53,00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles\{9B5BA71F-779F-4CE6-A6D4-33C2FD55317A}] ProfileName网络 Description网络 Manageddword:00000000 Categorydword:00000000 DateCreatedhex:e4,07,0c,00,00,00,0d,00,11,00,30,00,23,00,1f,01 NameTypedword:00000006 DateLastConnectedhex:e4,07,0c,00,00,00,0d,00,11,00,33,00,1a,00,c7,03 ...Flagflag{OPPOReno}