Vulnerability Development mailing list archives

Re: How to hide a file ?


From: H C <keydet89 () yahoo com>
Date: Wed, 9 Jan 2002 07:52:16 -0800 (PST)


I did the following:

C:\>cd ads

C:\ads>type c:\winnt\system32\sol.exe >
c:\ads\myfile2.txt:sol.exe

C:\ads>start c:\ads\myfile2.txt:sol.exe

C:\ads>

I just want to add something here, that has to do w/
ADSs but maybe be a little off topic...

In "Hacking Exposed", the authors mention file
streaming on NT4.0 and present the 'start' command as
a method of running .exe's hidden in ADSs.  However,
in "Hacking Windows 2000 Exposed", they make no
mention of this.  

Now, as JJ showed, it does work.  And I found where
the issue lies...perhaps...

Using the above example, go to the c:\ads directory
and type:

c:\ads>start myfile2.txt:sol.exe

You'll get an error dialog.  However, using the full
path allows you to run the .exes.  Very interesting.
 
When I right-click on the Taskbar, and select Task
Manager, I see
solitaire on the Applications tab, and myfile2.txt
on the Processes list.

Wanna see something really cool?  Try this:

Create a shortcut on the desktop.  Right-click, choose
'New', then 'Shortcut'.  Click browse, and navigate to
either Explorer.exe or myfile2.txt, in the C:\ads
directory...I went w/ myfile2.txt.  Note the icon. 
Now, after you've created the shortcut, right-click on
it and open the properties.  Go to Target, and add the
ADS...":sol.exe".  Wait a few seconds...and note the
change to the icon on the desktop...

Fun stuff, eh?!



__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/


Current thread: