hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

jubbly
I've heard you can hide file/folder behind a file/folder. I have been playing with this but seem unable to find out how to get it working.

I thought it would be like a locked dir as you have to know the full path but I've been told it's not. Also it's on a local machine to burn cd's with hidden files from the admin. So not just a rename of the file extension.

Does anyone have any ideas?
coder
http://www.governmentsecurity.org/forum/in...?showtopic=4084

I wrote a file that will shell all the proper commands for you... try it out biggrin.gif
coder
ok, well it seems that some of my posts have been lost (along with the tool i posted) - here is a nice paper... http://www.tvwug.org/files/ntfs-ds.pdf

oh, and remember this only worx on an NTFileSystem, you may still be using Fat32 (or Fat16, lol biggrin.gif ) and in that case teh Alternate Data Streams for windows wont work!
liquidSilver
no idea if it works, but try renaming the file to one of theese, the icon will be changed, and when clicked they it will open the file and the program/window:

Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}
Recycle Bin.{645FF040-5081-101B-9F08-00AA002F954E}
Internet Explorer.{FBF23B42-E3F0-101B-8488-00AA003E56F8}
Fonts.{BD84B380-8CA2-1069-AB1D-08000948F534}


Aint tested on .exe files wink.gif

Regards,
LiquidSilver.
coder
actually , silver brings up a good point... there are quite a few ways to hide files from users... maybe we should start a new thread so that members can post all they're little tricks...
liquidSilver
Well, I'm on to it, maybe got some more tricks somewhere, ummmm...
neoragexxx
QUOTE (coder @ Dec 3 2003, 01:31 PM)
ok, well it seems that some of my posts have been lost (along with the tool i posted) - here is a nice paper... http://www.tvwug.org/files/ntfs-ds.pdf

oh, and remember this only worx on an NTFileSystem, you may still be using Fat32 (or Fat16, lol biggrin.gif ) and in that case teh Alternate Data Streams for windows wont work!

thx a ton m8 i was l00king for something like this .
jubbly
Thanx guys I'm gonna have a look at that pdf and those that you have mentioned liquidsilver are if they double click it opens but if we type in the full path ie "c:\temp\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" we would go into our folder?

Sorry if I'm being dumb but I had found a thread about that stuff before.

Greetz
inconu
if you use "hyena" this "TRICK" dont work

a+
Helloman
Yeah

lets start a new thread with a lotta tricks to foul the admins wink.gif

Its easier to look for something when you dont have to look several threads to find what you need
Thom
mkdir "com1\"
mkdir "com1\.aux"

this will be hard to access thru Explorer... got to know the folder behind com1\ to acess it ...
net
th0m this trick causes problems in many cases... for example some programs running in such hidden dirs or using them would cause the machine to crash ( i experienced this with serv-u )
Thom
hah! wicked, i didnt know that - never happend for me
agamemnon
Putting in ALT-255 characters is also a pretty devious way of hiding directories... Just don't forget where abouts they are in the path or you'll never get rid of the thing!

-ed.
PiP
QUOTE (jubbly @ Dec 4 2003, 07:18 AM)
Thanx guys I'm gonna have a look at that pdf and those that you have mentioned liquidsilver are if they double click it opens but if we type in the full path ie "c:\temp\Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" we would go into our folder?

Sorry if I'm being dumb but I had found a thread about that stuff before.

Greetz

yep

Directory of C:\Documents and Settings\...\Desktop\pip\Shortcut to Control
Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}

[.] [..] file.txt
1 File(s) 8 bytes
2 Dir(s) 21,105,795,072 bytes free


created a folder, then renamed it with explorer to that...dbl click and it opens control panel, but can write to / read from the folder
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.