Penetration Testing mailing list archives

Re: [PEN-TEST] Raw Disk Mounter


From: Berend De Schouwer <bds () jhb ucs co za>
Date: Fri, 15 Dec 2000 08:25:46 +0200

On Fri, 15 Dec 2000 03:33:53 Clem Colman wrote:
Folks,

Do you know of any file systems or products that just allow you to mount
partitions and just read the tracks as raw data, dump it to a file etc on
another file etc.

The problem is I know what I'm looking for but can't mount the disk using
the correct file system type.

Ideas?

What is wrong with: 'cat /dev/sda1 > /tmp/myfile'?  You can also try
'vi /dev/sda1', but that could be horribly slow ;)

If you want to edit it sector-by-sector, you can try this /bin/bash
script:

# Initialize SECTORS, and SIZE from fdisk.
I=0
while [ ${I} -lt ${SECTORS} ]
do
        dd if=/dev/sda1 seek=${I} bs=${SIZE} count=1 of=/tmp/sector.${I}
        I=$[ ${I} + 1 ]
done

It should copy all the sectors, sector by sector, to /tmp/sector.*
Chances are you'll overflow $I somewhere along the line, so take care.

Thanks,
Clem.


Kind regards,                           
Berend

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Berend De Schouwer, +27-11-712-1435, UCS


Current thread: