Pages: 1, 2
Stephen79
very handy tips indeed. I thankyou.
GhostCow
here's a tip for yall...
on windows systems 2k/nt/xp i found this nice tip in an israeli security mag with no name:

add ".{0003000D-0000-0000-C000-000000000046}" to any dir name,
example: temp.000.{0003000D-0000-0000-C000-000000000046}

and it will show the file to be "temp.000" thru explorer browsing... and the icon will be of windows media player and it if the person tried to open the file by double clicking it, it will open it with windows media player (with no success)...
the big downside is that all you need to do is right click and "explore" it ... and thru DOS it is easily viewable... but for those lazy admins its a nice perfect little trick...
tip #2: you can take an existing temporary file or something and delete it, then rename your directory to the name and extension of the file and add the special line to it to make it look like its that file...

-GhostCow
ducky
Nice tips thanks mate...May come in handy (sorry about my eng)
RELiC
Heres something else also..you can Create a new dir called:

Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}

Now if the sysops opens it in windows he will think it's the CONTROL PANEL
and it will even pop up the CONTROL PANEL if he clicks on it..

Other system folder code-names:
Recycle Bin.{645FF040-5081-101B-9F08-00AA002F954E}
Internet Explorer.{FBF23B42-E3F0-101B-8488-00AA003E56F8}
Fonts.{BD84B380-8CA2-1069-AB1D-08000948F534}


etc..theres alot more file/folder types to choose from..
nice tip indeed thanks -GhostCow very cool info.

../
vnet576
Very nice tip, never knew about this feature of windows. smile.gif
liquidSilver
How.....Awesome! Wicked, Ha! I think I will fool our sysadmin at school tongue.gif
-=[MePhIsTo]=-
Works great wink.gif

Big thx
mrfloppy
here another one hide stuff in recycled folder laugh.gif access it via dos
only way you can see see hidden dir/files tongue.gif
UNDERTAKER
Great post people!!!
10x a lot!!!
limbox
This works in Windows XP. I can't access the folders with my explorer. But you always see the brackets as well and that too obvious. Anyway - great trick
hermel
THX for the good info smile.gif
ghost_c
hehe.... cool isn't it..smile.gif
kenshin_efx
Thankz man, is very nice tip.

10x for that info smile.gif
manu
M8,

I dont think ADMIN's are that Lazy and to be fooled..!! He he, Atleast they are "ADMIN" naaa?..!! biggrin.gif

Anyway Thanks M8, You can't make everybody fools everytime, but you came make somebody fools in everytime..!!

Manu rolleyes.gif
VamPs
in the fxp scene, people just store in /Recycler/ folder, as its invisible

lol had 4 terabyte on 1 chinese uni once

always works..

back in pub scene they use to do / / n com1 n prn invalid folders etc... but think thats only for nt4

nice to see some new tricks tho, tnx dude smile.gif
beardednose
Ghostcow,
When you do this on a PC that you share with others (that don't have admin rights), make sure you add security to the folder under which the "fake" folder resides, as I couldn't add security to the fake folder itself.

That way, other users won't delete your precious folder accidentally.

And of course, don't all you folks use temp.00---be more creative than the example.

Nice tip.
beardednose
After playing with this a bit more, I noticed that the fake folder (temp.00) appears in the left side of Windows Explorer, and if you double click on it on the LEFT side, it does open and reveal the files inside.

If you double click it when it's on the RIGHT side, it opens media player.

So this isn't as good as it seems originally. Of course, I'm open to the possibility that I goofed somewhere, but it doesn't appear that way, at least yet. Comments?
Mouhahaha
veryyyy nice, really helpfulll very good job, i just wanted to ask how to rename the folder to a normal folder ?
boshcash
nice one m8 , i wouldnt ever have known that , and it would help me to hide some executable stuff at server thnx
maxxis
Create is new dir:

My Computer.{20D04FE0-3AEA-1069-A2D8-08002B30309D}
My Documents.{ECF03A32-103D-11d2-854D-006008059367}

wink.gif
^RB^
aha... Just what I needed... smile.gif

Thanks for the new hiding tricks!!!!


RB
Mr_X
I tried to create a control panel dir. It worked. But now it makes my real Control panel crashing even if it is deleted. What to do? I neither want to reinstall my windows neither reformat my hard disk. Help me plz
no1
biggrin.gif

thx 4 this nice infos
saendler
very nice cool.gif thx
UltraCool
gonna remind that, nice tip indeed m8

But it's also easy deletable..?

Uc
SLiM577
well when i usually hide a directory i just make a bat file as such.

NET START VGN
CD %SYSTEMROOT%\system32\setup
attrib +S +H service
CD %SYSTEMROOT%\system32\setup
del x.exe

i usually attrib +S +H the folder i need to hide.

Hope this helps someone
hidden
same for me attrib +s +h it's well
inconu
I use "Hyena" .... and I see all hiden dirs ....

hi hi hi .... tongue.gif
trinity
QUOTE (RELiC @ Oct 31 2003, 08:58 PM)
Heres something else also..you can Create a new dir called:

Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}

Now if the sysops opens it in windows he will think it's the CONTROL PANEL
and it will even pop up the CONTROL PANEL if he clicks on it..

Other system folder code-names:
Recycle Bin.{645FF040-5081-101B-9F08-00AA002F954E}
Internet Explorer.{FBF23B42-E3F0-101B-8488-00AA003E56F8}
Fonts.{BD84B380-8CA2-1069-AB1D-08000948F534}


etc..theres alot more file/folder types to choose from..
nice tip indeed thanks -GhostCow very cool info.

../

Using this trick in Windows 2000 I can't go inside the directory. Clicking on Explore or Open it will open the Control Panel, or Recycle bin, etc...
Trinity dry.gif
rush
Do: Attrib +s +h +r dirname
And you can make rights on dir with cacls.exe!
try it out!
headbanger
thanks dude, very helpful
headbanger
cool i just tried it and it works great!
FiNaLBeTa
here you have two more :

CODE
Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}
Internet Explorer.{FBF23B42-E3F0-101B-8488-00AA003E56F8}
Recycle Bin.{645FF040-5081-101B-9F08-00AA002F954E}
My Computer.{20D04FE0-3AEA-1069-A2D8-08002B30309D}
My Documents.{ECF03A32-103D-11d2-854D-006008059367}
Fonts.{BD84B380-8CA2-1069-AB1D-08000948F534}
zero-maitimax
ppl have read all the posting on this forum..

the attrib mode isn't usefull...
i use windowscommander www.wincmd.com
i can see every folder that is hidden (it's a option in wincmd you have the klick on it)


could somebody explain this for me:
QUOTE
add ".{0003000D-0000-0000-C000-000000000046}" to any dir name,
example: temp.000.{0003000D-0000-0000-C000-000000000046}

how should i use this??


question no2.
why do you put this behind the files?
BD84B380-8CA2-1069-AB1D-08000948F534
what is it?
FiNaLBeTa
QUOTE
could somebody explain this for me:
QUOTE
add ".{0003000D-0000-0000-C000-000000000046}" to any dir name,
example: temp.000.{0003000D-0000-0000-C000-000000000046}

how should i use this??


No idea how i could explain this even more...
it's there black on white, try on youre pc dude, it's not gonna crash it.

QUOTE
question no2.
why do you put this behind the files?
BD84B380-8CA2-1069-AB1D-08000948F534
what is it?


read dude, it's not : BD84B380-8CA2-1069-AB1D-08000948F534
it's : {BD84B380-8CA2-1069-AB1D-08000948F534}

and the reason is that for the admin that folder will look like a special windows folder. in this case fonts.
when he click on it, he wont go in the dir, but windows will redirect him to the fonts windir.
beardednose
Final, be nice. You were a noob once too, and I'm sure you missed something simple a couple times here and there.

zero, what it means is to type the info after the name of your directory. For example, it you want a directory called "sys" to hide files in, when you create your directory, name your directory

sys.{0003000D-0000-0000-C000-000000000046}

In other words, type all the info above when you name your directory.

I think Final answered your second question.

GhostCow
but you will still be able to access that dir through dos, flashfxp, etc...
x1`
thanks for this new method works great tongue.gif
zero-maitimax
now i understand..

yeah sorry i'm still using win98 so... i was wondering what you ppl mean..

i have seen it on the xp machiene..
Blade
cool thx 4 info
Cyrus
QUOTE (GhostCow @ Jan 2 2004, 02:31 PM)
but you will still be able to access that dir through dos, flashfxp, etc...

yes, but the admin cant acess it with his explorer wink.gif
Neo2k
good tips anyway, thx wink.gif
zero-maitimax
QUOTE (|Cyrus| @ Jan 3 2004, 12:26 AM)
QUOTE (GhostCow @ Jan 2 2004, 02:31 PM)
but you will still be able to access that dir through dos, flashfxp, etc...

yes, but the admin cant acess it with his explorer wink.gif

i think that good

i mean if you have a keylogger that logs stuff you can put the txt in does dirs
and you are the only one that can read it in does.

normale system user or admin they will not go check every dir in dos
it's to much work
GhostCow
hence the term: lazy admin! blink.gif
beardednose
cyrus
QUOTE
yes, but the admin cant acess it with his explorer


I disagree. see my second post on page 2 of this thread. I was using w2k to test this.
zero-maitimax
QUOTE (beardednose @ Jan 5 2004, 08:05 PM)
cyrus
QUOTE
yes, but the admin cant acess it with his explorer


I disagree. see my second post on page 2 of this thread. I was using w2k to test this.

i agree..

i'm using windows command and i'm getting in and out if it's a normale dir....
cha0s
big thx
GhostCow
there really is no reason for a sysadmin to start browsing in dirs like c:\winnt\system32\ras\ unless he finds something suspicous...
what im trying to say is: people, hide files there dont run files from there.
and use rootkits biggrin.gif
macca
system volume infomation

folder is my favourite place to start creating folders to hide files.... just hide files there, like your directories ect, dont run anything from there, it will stand out like a soar thumb on a 2 fingered elephant wink.gif

ako
gonna try this out thanks for the info
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.