In the previous post, we have known, how to hide files in ADS of files/folder in NTFS file format. In this post we will study ways to find hidden files in ADS. Sysinternals is a tools suite which contains a whole lot of tools meant for manipulating/adding/observing various features of OS.
Showing posts with label ADS. Show all posts
Showing posts with label ADS. Show all posts
Thursday, May 5, 2011
Saturday, April 23, 2011
Hiding files in ADS (Alternate Data Streams) in Windows
Alternate Data Streams exists in NTFS file streams which can be used to hide sensitive information, even worms, trojans etc. We can hide files in ADS of folders & files. Using ADS required little skill & this security issue is relatively unknown to people. To begin, open cmd & make a folder.
#mkdir C:\folder
#echo this is hidden text > folder:secret
Now, open the folder & check whether there is any file. You will find no file there. The file is in ADS of directory 'folder'.
#mkdir C:\folder
#echo this is hidden text > folder:secret
Now, open the folder & check whether there is any file. You will find no file there. The file is in ADS of directory 'folder'.
Subscribe to:
Posts (Atom)