Thursday, October 2, 2008

How To Sew Moccasin Boots

FUNDL

In digital forensics, there is always need tools and new ideas .... Here I am limited to creating three small tool, which may not have nemeno utility, however, at least from an academic point of view may be valid:
FUNDL - File Undeleter

- This is a file for Linux bash shell (requires the use of
Sleuthkit
), which is used to retrieve all the deleted files from a disk or from its image bitstream. Here
Windows
version.

JPG_Builder
- This is a bash shell script for Linux, which inserts the header and footer of a JPG image into a binary file. This may serve to restore groped some of which are missing corrupted JPG header and / or footer.

Spywarino
- This is a small program for Windows that uses the pre-compiled dd, nc bitwise to duplicate a disk in the LAN, without the owner's knowledge of the disk (clearly a monkey user). Useful for the hard copy of someone and then analyze it calmly. ;)
Well toollini are three funny ... I repeat do not know how useful it is FUNDL ... maybe ... but certainly the most useful to develop better anyway .... have educational value.


0 comments:

Post a Comment