PaulDotCom mailing list archives

Anti-forensic tools

From: rd at rd1.net (Ralph Durkee)
Date: Sat, 04 Jul 2009 05:31:20 -0400

Whoops, just occurred to me that previous cmd wasn't quiet right as the 
windows shell picks up dd as part of the loop and invokes it each time, 
which means the output device is closed and re-opened.  Needs to add 
some parens like so...

(for /L %I IN (1,0,2) DO @type lemonparty.jpg ) | dd if=- of=\\.\f: bs=512


Ralph Durkee wrote:

The following simple loop should do it.

for /L %I IN (1,0,2) DO @type lemonparty.jpg  | dd if=- of=\\.\f: bs=512

Current thread:

Anti-forensic tools, (continued)
- - - Anti-forensic tools Adrian Crenshaw (Jul 02)
    - Anti-forensic tools Jim Halfpenny (Jul 02)
    - Anti-forensic tools Grymoire (Jul 02)
    - Anti-forensic tools Jim Halfpenny (Jul 02)
    - Anti-forensic tools Jack Daniel (Jul 02)
- Anti-forensic tools Grymoire (Jul 02)
  - Anti-forensic tools Joshua Wright (Jul 02)
    - Anti-forensic tools John Strand (Jul 03)
    - Anti-forensic tools Adrian Crenshaw (Jul 03)
    - Anti-forensic tools Ralph Durkee (Jul 03)
    - Anti-forensic tools Ralph Durkee (Jul 04)