Get-keys.bat (90% AUTHENTIC)
Feature: get-keys.bat
Overview
A short Windows batch utility that extracts, displays, and optionally saves product keys, license codes, or other key-like strings from system files and registry locations on a local machine. Useful for inventorying software keys for backup or migration.
Deliverables
- get-keys.bat (batch + PowerShell calls) — basic scanning and display.
- get-keys.ps1 — improved PowerShell implementation with decoding and export options.
- README with usage, security notes, and examples.
Review: get-keys.bat (Windows Product Key Retrieval Utility)
Verdict: A highly efficient, lightweight forensic tool for system administrators, but requires caution regarding security hygiene. get-keys.bat
:export set /p regpath="Enter registry path (e.g., HKLM\Software): " set /p exportfile="Enter export filename (e.g., backup.reg): " reg export "%regpath%" "%exportfile%" echo Exported to %exportfile% pause goto menu Feature: get-keys
@echo off
REM get-keys.bat
REM Recursively search for likely keys/tokens in files and generate a CSV report.
REM Usage:
REM get-keys.bat [root_path] [--extensions=ext1,ext2,...] [--exclude=pattern1;pattern2] [--mask] [--dry-run]
REM Defaults:
REM root_path = current directory
REM extensions = txt,env,conf,config,json,js,py,java,xml,ini,yml,yaml,md,log
REM exclude = .git;.venv;node_modules;venv
REM mask = redact found values in report
REM dry-run = do not write report (only console output)
Troubleshooting get-keys.bat
"Access Denied" Error
Solution: Right-click the file > Run as Administrator. get-keys
4. Forensic Indicators (IOCs)
If you are analyzing a system to see if this script was run, look for: