say you have a movie that you want to store, but work has blocked all that kind of file and restricuted disk space usage.
say we have a movie.avi and we want to hide it in a nice little text file.
try this:
c:\>type movie.avi > hide.txt:movie.avi
This will attach your movie into the meta data of a nice little text file.
to get it back use cat c:\hide.txt:movie.avu > c:\movie.iso
This nice little "workaround" comes to us courtesy of NTFS data streams.
to check for these kinds of files in your servers as an admin, use a utility called lns from ntsecurity.nu.
this will enable you to look up any files that may contain hidden stream data, anything that isn't id.identity then you have some hidden file in another file.
This utility doesn't work in 2008 but there is another tool called ADS or Alternate Data Streams. (streamtools)
More info can be found here: http://www.windowsecurity.com/articles/Alternate_Data_Streams.html
No comments:
Post a Comment