Title: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: don on March 21, 2007, 05:53:24 PM

Many thanks to Dan (p0et) for this contribution. Hopefully this is the first of many. Well done... and killer voice, dude!

Quote

By Dan Honkanen, GCIH, Security+, MCP, DCSE

This video is a companion to "Alternate Data Streams (ADS): Hiding In Plain Site (http://www.ethicalhacker.net/content/view/115/24/)" by myself and Brian Wilson. I am going to show you how Alternate Data Streams (ADS) work and show you a small example of how to make one. ADS is a feature in the NTFS file systems to make a compatibility with HFS, or the old Macintosh Hierarchical File System. ADS has been a function of NTFS since NT 4.0 and is still available in Windows XP (and yes even Windows Vista). ADS gives you the ability to inject/add file data into existing files without affecting their functionality, size, or display in utilities like Windows Explorer or even "dir" under command line.

[Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site (http://www.ethicalhacker.net/content/view/120/24/)

For comments or suggestions on other articles / videos you'd like to see from Dan, email p0et@ethicalhacker.net (http://www.ethicalhacker.net/mailto:p0et@ethicalhacker.net)

Hope you enjoy,
Don

Title: Re: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: nebu10uz on March 21, 2007, 05:56:34 PM

Awesome vid. With that voice, p0et should continue making videos for EH, ;D. Thanks

Title: Re: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: don on March 21, 2007, 06:04:08 PM

Submitted to digg:

http://www.digg.com/security/Video_Alternate_Data_Streams_ADS_Hiding_Data_In_Plain_Site

Let's make p0et famous!

Don

Title: Re: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: nebu10uz on March 21, 2007, 06:29:59 PM

dugg it

Title: Re: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: slimjim100 on March 21, 2007, 07:34:52 PM

Outstanding job p0et!!!! Just as an FYI I worked with p0et on this little project and he spent a lot of time to make this video. If you have ever made a computer based video you will understand the time and number of takes you have to put out to get a good product. Keep up the good work Dan (p0et) and I can't wait to see the next video!

Brian
(aka Slimjim100)

Title: Re: [Article]-Video: Alternate Data Streams (ADS): Hiding In Plain Site
Post by: p0et on March 21, 2007, 10:59:29 PM

Wow! I've never liked my voice, so I'm glad some people do. haha

It was fun working on the paper with Brian and on this video. It was the first time doing anything like this and maybe I'll do another sometime... ;)

Thanks guys.

EH-Net

Columns => Wilson => Topic started by: don on March 21, 2007, 05:53:24 PM