In digital forensics, there is always need tools and new ideas ....
Here I am limited to creating three small tool, which may not have nemeno utility, however, at least from an academic point of view may be valid: FUNDL - File Undeleter
- This is a file for Linux bash shell (requires the use of
Sleuthkit
), which is used to retrieve all the deleted files from a disk or from its image bitstream. Here
Windows
version.
JPG_Builder
- This is a bash shell script for Linux, which inserts the header and footer of a JPG image into a binary file. This may serve to restore groped some of which are missing corrupted JPG header and / or footer.
Spywarino
- This is a small program for Windows that uses the pre-compiled dd, nc bitwise to duplicate a disk in the LAN, without the owner's knowledge of the disk (clearly a monkey user). Useful for the hard copy of someone and then analyze it calmly. ;)
Well toollini are three funny ... I repeat do not know how useful it is FUNDL ... maybe ... but certainly the most useful to develop better anyway .... have educational value.
0 comments:
Post a Comment