Which command lets a Meterpreter user read from or write to the Windows Registry?

• A. ls
• B. download
• C. reg
• D. pwd

Answer: (C)

Reading and writing the Windows Registry from a Meterpreter session is done with the reg command. The Windows Registry stores configuration and settings for the OS and applications, so having a dedicated interface to query keys/values and to create or modify them is essential for post-exploitation tasks. The reg command provides the necessary operations to read registry data and to write new keys or values, making it the appropriate tool for this purpose. Other commands like ls, pwd, and download operate on the file system or file transfer and do not interact with the registry. Use reg with subcommands such as reg read (or reg query) to read values and reg add (or reg write) to modify or create values.