The Ethical Hacker Network - hiding in linux

Latest Additions

Who's Online

EH-Net News Feeds

Latest Additions

lovewadhwa

Newbie

Offline

Posts: 16

hiding in linux

« on: July 03, 2007, 05:31:40 AM »

Hi all
I just need to hide out directory in linux.One option is to make it renamed as .directory(preceding dot before directory name).But its still accessible in this method.I need a utility or any method to hide it completely so that noone can access it.Kindly help regardin the same.
Hopin a quick and positive response from ur side.


	Logged

lovewadhwa@gmail.com

jimbob

Sr. Member

Offline

Posts: 414

Re: hiding in linux

« Reply #1 on: July 03, 2007, 06:38:15 AM »

There are lots of ways to hide files of varying levels of sophistication. Below is a far from exhaustive list but should give you some ideas.

Adding a '.' in front of the filename, as you suggested, hides it from casual view using ls.
The best place to hide a letter is on the mantlepiece. Hiding something in plain sight is often very effective. It's still popular to name a directory ... if you want to hide it since it's hidden and easily overlooked among . and .. or you can put the file in a location someone is not likely to look e.g. /usr/lib/
You can create trojaned system binaries (rootkit) to ignore certain filename.
A kernel level rootkit
Put the files on a partition not mounted by defafult and mount it when you want access
Removeable media
Encryption

The way you hide files depends on why you need to hide them and from whom you are hiding them.

Regards,
Jim


	Logged

ChrisG

EH-Net Columnist
Hero Member

Offline

Posts: 1166

Re: hiding in linux

« Reply #2 on: July 03, 2007, 06:55:39 PM »

Quote from: lovewadhwa on July 03, 2007, 05:31:40 AM

the only way to "totally hide" a directory is with a rootkit.

if you need to hide something in plain site i would stick it in /dev in one of the random dev folders with a .foldername


	Logged

...tests i took go here...

http://carnal0wnage.attackresearch.com/

jimbob

Sr. Member

Offline

Posts: 414

Re: hiding in linux

« Reply #3 on: July 12, 2007, 08:34:19 AM »

I conspicuously left steganography off the list. Now that's really hiding in plain sight.

Jim


	Logged

Pages: [1] Go Up

« previous next »

SANS Deals 4 EH-Netters

$150 OFF Any SANS Course in Any Format!
Coupon Code: Refer_EHN
Including SANS Phoenix 2012, SANS 2012

Recent Forum Topics