Full Disclosure mailing list archives

Re: Re: Full-disclosure Digest, Vol 7, Issue 25


From: fd () ew nsci us
Date: Mon, 12 Sep 2005 23:54:07 -0700 (PDT)

On Mon, 12 Sep 2005, Gary E. Miller wrote:
On Mon, 12 Sep 2005 druid () stonedcoder org wrote:

Purchase? no. You can dd the drive and use a utility to recognize files
within the unallocated space, I just had to do this a couple nights ago
so:

(on system you want to copy)
dd if=/dev/hda | nc otherhost 5000

If you are running bash, then you do not even need netcat:

      dd if=/dev/hda > /dev/tcp/otherhost/5000


What if I am otherhost?  Is there a facility for something like 

[root@otherhost]# cat /dev/tcp/me/listen/5000 > yesterhost-hda.img
  //
[root@yesterhost]# dd if=/dev/hda > /dev/tcp/otherhost/5000

-Eric

-- 
Eric Wheeler
Vice President
National Security Concepts, Inc.
PO Box 3567
Tualatin, OR 97062

http://www.nsci.us/
Voice: (503) 293-7656
Fax:   (503) 885-0770

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: