Click here to Skip to main content
12,063,645 members (59,564 online)
Rate this:
 
Please Sign up or sign in to vote.
See more: file disk
Hi all,

As you (may) know there are 63 sectors after the MBR space on the hard disk. It's a potential place where people can hide some files or information. I am trying to test some forensic tools whether they can find the hidden file in that specific area. So, is there any suggestion regarding how I can hide an image file in that are?

Any help will be appreciated.

Lorderon
Posted 6-Sep-12 6:12am
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 3

I do not know a Windows tool for such a thing. But Linux/Unix offers the command "dd if=inputfile.jpg of=/dev/hda" for writing directly to a disk. Beware: you can destroy your system when you do not use it correctly!
See e.g. http://www.linuxquestions.org/questions/linux-newbie-8/learn-the-dd-command-362506/[^] for some examples on its use, though your specific case is not shown.
  Permalink  
Comments
LoRDeRoN 7-Sep-12 11:59am
   
Hi Bernhard,

Thank you. You are right, I might use dd tool. As for the link, I think it's very helpful anyway. I'll see if I can do what I need.

Best,
Lorderon
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 1

You can find some ideas by using Google!
Here is an example query[^]! Wink | ;)

It yielded this interesting looking link on CodeProject!!
Undelete a file in NTFS[^]
  Permalink  
Comments
LoRDeRoN 6-Sep-12 11:42am
   
Thanks for your post, however I'm not looking for a way to recover a file from the disk. I am trying to hide a file into the disk and specifically to just right after the MBR space. Hope it's clear.
Rate this: bad
 
good
Please Sign up or sign in to vote.

Solution 2

Well I didn't study the article closely, but I'll bet it contains relevant information!
How about this link[^] (found in the article)!?
  Permalink  
Comments
LoRDeRoN 6-Sep-12 14:31pm
   
It doesn't have what I need. Thank you though.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

  Print Answers RSS
Top Experts
Last 24hrsThis month


Advertise | Privacy | Mobile
Web02 | 2.8.160204.4 | Last Updated 7 Sep 2012
Copyright © CodeProject, 1999-2016
All Rights Reserved. Terms of Service
Layout: fixed | fluid

CodeProject, 503-250 Ferrand Drive Toronto Ontario, M3C 3G8 Canada +1 416-849-8900 x 100