hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Hide Some Files
Neo_
hello,
i've tried to hide some files by attrib +h ... ok

But how can i hide some directory ?
I've tried attrib, or with /com1/ but when i type :
dir/s **, it always find my files.

saetji
attrib +h c:\winnt\system32\drivers\etc\start.bat

is what i use and it hides the files fine
Neo_
I've made a mistake, i was talking about hidden directory with no hidden files :
Like this :

CODE

C:\gov>dir
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est 5E16-9AED

Répertoire de C:\gov

14/01/2004  23:54    <REP>          .
14/01/2004  23:54    <REP>          ..
14/01/2004  23:54                 5 test.bat
              1 fichier(s)                5 octets
              2 Rép(s)   7 010 172 928 octets libres

C:\gov>cd ..

C:\>attrib +h gov

C:\>dir/s test.bat
Le volume dans le lecteur C s'appelle HDD
Le numéro de série du volume est 5E16-9AED

Répertoire de C:\gov

14/01/2004  23:54                 5 test.bat

priapo
What about:
C:\gov>attrib +h *.*
C:\gov>cd..
C:\>attrib +h gov

If it doesn't work you might want to try hiding files in ADS
Gotisch
attrib +h /S /D gov
damulint
Thank you..
But am I Question?
IS hiding Completely a way??
Ask me..GSO Member .. smile.gif
Thanks everyone..
zero-maitimax
i use wincmd and i still see does files :S

it's not usefull :S
Jeeve5
atrrib really isn't that useful with hiding files. my suggestion is to hide them in a different NTFS stream if the HDD uses a NTFS filesystem. there are quite a few docs and tools about this topic out there. just check packetstormsecurity for example.
GhostCow
yea but if it isnt ntfs i suggest rootkits
Jeeve5
true. i haven't been much into rootkits lately. any good ones out there that don't get detected by every damn AV in the world?
boshcash
attrib helps u can also try attrib +S +H , i dont like dealing with ADS its somehow complicated , also rootkits are useful but u have to test a rootkit and make it undetected and u will go into another problem , so if u try that above , it will make file hidden and also system file , so i think the viewer must tick show hidden files and folders and untick hide operating system files , so that may prove to be useful ...
320X
you can use th metod of the stream (but only works on partitions with ntfs)
Gotisch
QUOTE (320X @ Jan 15 2004, 11:47 PM)
you can use th metod of the stream (but only works on partitions with ntfs)

Could You elaborate that ?
LittleHacker
Try to make you path from command prompt directly in recycled folder! like this :
QUOTE
md C:\recyled\gov
attrib +h C:\recyled\gov

Jeeve5
QUOTE (Gotisch @ Jan 15 2004, 11:57 PM)
QUOTE (320X @ Jan 15 2004, 11:47 PM)
you can use th metod of the stream (but only works on partitions with ntfs)

Could You elaborate that ?

He is basically suggesting what i said before. Just read my post above rolleyes.gif
TrIaNguLaR
attrib +h c:\winnt\system32\drivers\etc\start.bat


that works great


thanks
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.