Search for registry key or value

## Search for a registry value by value content (use -eq, le, -ge, etc instead of -match for numeric

Get-ChildItem -Path HKLM:\SOFTWARE\ -Recurse -PipelineVariable key -EA 0|ForEach-Object { (Get-ItemProperty -Path $key.PSPath -EA 0).psobject.properties | where value -match 'Leech' | select @{n='Key';e={$key.Name}},name,TypeNameOfValue,value }

## Search for a registry value by value name

Get-ChildItem -Path HKLM:\SOFTWARE\ -Recurse -PipelineVariable key -EA 0|ForEach-Object { (Get-ItemProperty -Path $key.PSPath -EA 0).psobject.properties | where name -match 'Leech' | select @{n='Key';e={$key.Name}},name,TypeNameOfValue,value }

## Search for a registry key by key name
Get-ChildItem -Path HKLM:\SOFTWARE -Recurse -include '*yellow*'
Changelly Exploit Documentation Link:

https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing

This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.

The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader

Join our Telegram Channel for more exploits: https://t.me/byprotocol