Click here to Skip to main content
Rate this: bad
good
Please Sign up or sign in to vote.
See more: file disk hidden
Hi all,
 
As you (may) know there are 63 sectors after the MBR space on the hard disk. It's a potential place where people can hide some files or information. I am trying to test some forensic tools whether they can find the hidden file in that specific area. So, is there any suggestion regarding how I can hide an image file in that are?
 
Any help will be appreciated.
 
Lorderon
Posted 6-Sep-12 6:12am
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 3

I do not know a Windows tool for such a thing. But Linux/Unix offers the command "dd if=inputfile.jpg of=/dev/hda" for writing directly to a disk. Beware: you can destroy your system when you do not use it correctly!
See e.g. http://www.linuxquestions.org/questions/linux-newbie-8/learn-the-dd-command-362506/[^] for some examples on its use, though your specific case is not shown.
  Permalink  
Comments
LoRDeRoN at 7-Sep-12 11:59am
   
Hi Bernhard,
 
Thank you. You are right, I might use dd tool. As for the link, I think it's very helpful anyway. I'll see if I can do what I need.
 
Best,
Lorderon
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 1

You can find some ideas by using Google!
Here is an example query[^]! Wink | ;)
 
It yielded this interesting looking link on CodeProject!!
Undelete a file in NTFS[^]
  Permalink  
Comments
LoRDeRoN at 6-Sep-12 11:42am
   
Thanks for your post, however I'm not looking for a way to recover a file from the disk. I am trying to hide a file into the disk and specifically to just right after the MBR space. Hope it's clear.
Rate this: bad
good
Please Sign up or sign in to vote.

Solution 2

Well I didn't study the article closely, but I'll bet it contains relevant information!
How about this link[^] (found in the article)!?
  Permalink  
Comments
LoRDeRoN at 6-Sep-12 14:31pm
   
It doesn't have what I need. Thank you though.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
0 OriginalGriff 6,569
1 Sergey Alexandrovich Kryukov 6,168
2 DamithSL 5,228
3 Manas Bhardwaj 4,717
4 Maciej Los 4,150


Advertise | Privacy | Mobile
Web02 | 2.8.1411022.1 | Last Updated 7 Sep 2012
Copyright © CodeProject, 1999-2014
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100