如何在磁盘上MBR空间之后将文件隐藏到63个扇区中? [英] How can I hide a file into the 63 sectors right after MBR space on the disk?

问题描述

大家好，

您可能知道硬盘上MBR空间后面有63个扇区.人们可能会在其中隐藏一些文件或信息.我正在尝试测试一些取证工具，他们是否可以在该特定区域中找到隐藏的文件.那么，关于如何在其中隐藏图像文件有什么建议吗?

任何帮助将不胜感激.

Lorderon

Hi all,

As you (may) know there are 63 sectors after the MBR space on the hard disk. It''s a potential place where people can hide some files or information. I am trying to test some forensic tools whether they can find the hidden file in that specific area. So, is there any suggestion regarding how I can hide an image file in that are?

Any help will be appreciated.

Lorderon

推荐答案

我不知道用于此类事情的Windows工具.但是Linux/Unix提供了用于直接写入磁盘的命令"dd if=inputfile.jpg of=/dev/hda".注意:如果使用不正确，可能会破坏系统！
参见例如 http://www.linuxquestions.org/questions/linux-newbie -8/learn-the-dd-command-362506/ [

I do not know a Windows tool for such a thing. But Linux/Unix offers the command "dd if=inputfile.jpg of=/dev/hda" for writing directly to a disk. Beware: you can destroy your system when you do not use it correctly!
See e.g. http://www.linuxquestions.org/questions/linux-newbie-8/learn-the-dd-command-362506/[^] for some examples on its use, though your specific case is not shown.

您可以找到一些使用Google进行创意！
这是一个示例查询 [ ^ ]！ ;)

它在CodeProject上产生了这个有趣的链接！ 取消删除NTFS中的文件 [

You can find some ideas by using Google!
Here is an example query[^]! ;)

It yielded this interesting looking link on CodeProject!!
Undelete a file in NTFS[^]

我没有仔细研究文章，但我敢打赌它包含相关信息！
此链接如何? [

Well I didn''t study the article closely, but I''ll bet it contains relevant information!
How about this link[^] (found in the article)!?

这篇关于如何在磁盘上MBR空间之后将文件隐藏到63个扇区中?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！