-
April 4th, 2005, 11:10 PM
#1
Junior Member
ADS In NTFS
ADS, or Alternate Data Streams, is a not very well known feature of the NTFS file system. I still don't know very much about, one of my friends showed it to me the other day. Read about ADS here, does anyone know of this, or what it was intended for? If found it quite interesting, however seemingly pointless it is, I'm gonna mess with it, see what all I can do with it at my school.
-
April 4th, 2005, 11:30 PM
#2
ADS is a beautiful way of hiding stuff... Unless you know it exists, what it can do and how I can use it to help me exploit your system then it is a very useful way for someone to hide their exploitation of your system.
Google "LADS ADS" and read more.
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
-
April 4th, 2005, 11:47 PM
#3
Junior Member
Thanks, one last thing, can I use ADS to hide an entire directory, or just individual files?
I don't have NTFS at my house to test it on, just my Linux OS, I have to wait till I have free time at school to test it on my own(which probably won't happen for a while).
-
April 5th, 2005, 01:04 AM
#4
LaoTzu,
If you have a winxp or w2k install disk, you could use vmware workstation to run windows on your linux box, and try it out.
http://www.vmware.com/download/workstation.html
[EDIT]by the way, first result in google yielded this page:
http://www.heysoft.de/nt/ntfs-ads.htm
Can somebody add an ADS to a directory entry instead of a file?
Yes, it works the same way.
[/EDIT]
-ik
Alright Brain, you don\'t like me, and I don\'t like you. But let\'s just do this, and I can get back to killing you with beer.
-- Homer S.
-
April 5th, 2005, 02:05 AM
#5
It was more or less put in for Mac support. We have some more details here:
http://www.antionline.com/showthread...ighlight=altds
-
April 5th, 2005, 04:58 AM
#6
Junior Member
[QUOTE] Originally posted here by Iron-Kurton
[B]LaoTzu,
If you have a winxp or w2k install disk, you could use vmware workstation to run windows on your linux box, and try it out.
http://www.vmware.com/download/workstation.html
[EDIT]by the way, first result in google yielded this page:
http://www.heysoft.de/nt/ntfs-ads.htm
[/EDIT]
But what I meant was this, would this work, hiding a directory in another direcotry or file using ads.
md dir1
cd dir1
echo stuffinfile>text1.txt
echo stuffinfile>text2.txt
cd ..
md dir2
type dir1>dir2:dir1 (or type dir1>notepad.exe:dir1)
Don't have the disk, but I can get them, I'll check out vmware workstation.
-
April 5th, 2005, 09:37 AM
#7
AFAIK ADS only works on files. ADS is used for Apple filesharing. Apple uses 2 streams to store data. One stream contains the actual file and the other stream is used to store information about that file (filetype i.e.).
type dir1>dir2:dir1 (or type dir1>notepad.exe:dir1)
Think about this again.... Type a directory? What's it going to type?
Oliver's Law:
Experience is something you don't get until just after you need it.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|