LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   Can i hide a file with bmap???? (http://www.linuxquestions.org/questions/linux-security-4/can-i-hide-a-file-with-bmap-408369/)

DropSig 01-26-2006 06:43 PM

Can i hide a file with bmap????
 
i know u can hide text and i can hide most file that way(because they mostly are text or script)
But can i hide a binary file in a slack????

unSpawn 01-26-2006 08:43 PM

Why don't you just try it. Your system has enough binaries to play with...

DropSig 01-27-2006 09:31 AM

so far i did'nt have any succes. the somewhat closest i got was with:
bmap --target (File with slack) --mode putslack (Binary file)
which get me a "seek error"

Or i just tried:
cp (binary file) (binary file).2 | bmap --mode putslack (File with slack)
gives me:
stuffing block 1107588
slack size 1490
block size 4096


#i made sure to check that the slack was big enough to hold the file.

well it did copy something in the slack but not what i wanted.

I can easily place the output of any operation mabe by or on a binary in the slack but not the file itself.

unSpawn 01-29-2006 07:32 AM

a "seek error"
Hmm. No idea why. Maybe run strace on it. Then again Bmap is rather old and I think it's not supported/maintained anymore.


#i made sure to check that the slack was big enough to hold the file.
How did you check? Read somewhere the kernel does show the right value but "stat" doesn't.


All times are GMT -5. The time now is 11:23 PM.