Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
Jan 2009 Free Giveaway Sponsor - Black Hat DC
Scooby Doo and the Crypto Caper - Answers and Winners
Daemon - A Contest Revealed
Hacking: The Art of Exploitation 2nd Edition
Nov 2008 Free Giveaway - Winners
Dec 2008 Free Giveaway Sponsor - SANS
Santa Claus is Hacking to Town
Plug-N-Play Network Hacking
Nov 2008 Free Giveaway Sponsor - CWNP
Daemon - A Contest Begins Now
It Happened One Friday - Answers and Winners
Daemon - A Contest
Scooby Doo and the Crypto Caper
MS Blue Hat Hackers Headline Chicago Security Con
The Pen Testing Perfect Storm Webcast Series with Skoudis, Wright, Johnson
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 25 guests and 1 member online
EH-Net Donations
Enter Amount:
$
CAD
USD
GBP
AUD
JPY
EUR
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations
You are here:
Home
Forum
Ethical Hacking Discussions and Related Certifications
Other
Drive Imaging
Ethical Hacker Community Forums
January 07, 2009, 06:17:39 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100!
www.chicagocon.com/content/view/103/51/
Home
Help
Calendar
Login
Register
Ethical Hacker Community Forums
>
Ethical Hacking Discussions and Related Certifications
>
Other
(Moderator:
don
) >
Drive Imaging
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: Drive Imaging (Read 3111 times)
0 Members and 1 Guest are viewing this topic.
BillV
Hero Member
Offline
Posts: 880
Drive Imaging
«
on:
August 14, 2008, 11:39:38 AM »
Does anyone have any recommendations for free/open-source drive imaging software?
I have come across
Clonezilla
and
FOG
.
I've yet to try out FOG, but Clonezilla is ridiculously unstable and doesn't seem to work properly.
Anyone have suggestions?
I'm going to try out FOG later today too, but figured I'd ask around to see what all everyone had to offer.
Thanks.
Bill
Logged
oneeyedcarmen
Full Member
Offline
Posts: 205
Klaatu, Borada,Necktie?
Re: Drive Imaging
«
Reply #1 on:
August 14, 2008, 11:46:14 AM »
I was for a long time using a product that I believe was called CloneEZ or EZClone. However, when I consulted the
great, wise oracle
, I kept getting links for pot plant cloning products.
Logged
MCP, Security+, Associate (ISC)2
oleDB
Full Member
Offline
Posts: 231
Re: Drive Imaging
«
Reply #2 on:
August 14, 2008, 12:38:38 PM »
If FOG disappoints, you might consider just trolling the dealdump sites for awhile. This year I saw a Symantec bundle with Ghost for like 29.99. Yeah it sucks to pay, but your getting a reliable product.
Logged
jimbob
Sr. Member
Offline
Posts: 332
Re: Drive Imaging
«
Reply #3 on:
August 14, 2008, 01:30:29 PM »
Quote from: BillV on August 14, 2008, 11:39:38 AM
Does anyone have any recommendations for free/open-source drive imaging software?
Depends what your requirements are and what platform your using. There are simple command line tools like dd (and varients like ddrescue and dcfldd), forensic duplication tools like FTK imager, the ever popular Norton Ghost and many more.
Let me know what you need and I can make a suggestion.
Jimbob
Logged
BillV
Hero Member
Offline
Posts: 880
Re: Drive Imaging
«
Reply #4 on:
August 14, 2008, 01:35:21 PM »
I just tried out the
Trinity Rescue Kit
which actually has some really neat features that I'm going to need to explore a little more. It seemed pretty stable, but it doesn't do local disk-to-disk backups (that I could find). It does, however, have an option for disk-to-disk over the network and requires 2 CDs and a different boot option in the receiving system. I'm going to try that out when I get a chance.
For now I'm still looking for something that will clone to a drive I have connected via USB. My next try is going to be with
PING
.
Jimbob, specifically I'm looking for something that has the ability to clone a drive (completely.. programs, registry, etc). I would like to be able to plug-in an external drive (or drive-to-usb device) and be able to clone the local drive. Then obviously have the ability to boot this new clone. Exactly what Clonezilla says it does, but something that works
Logged
jimbob
Sr. Member
Offline
Posts: 332
Re: Drive Imaging
«
Reply #5 on:
August 14, 2008, 01:41:49 PM »
Try FTK Imager. It's part of the Forensic Tool Kit suite, and while it's not open source it is free as in beer.
http://www.accessdata.com/downloads.html
Cheers,
Jimbob
Logged
oleDB
Full Member
Offline
Posts: 231
Re: Drive Imaging
«
Reply #6 on:
August 14, 2008, 02:15:59 PM »
If you go the dd or dcfldd route, check the free tool from cert/cc for booting a dd image
http://liveview.sourceforge.net/
Logged
Ketchup
Newbie
Offline
Posts: 47
Re: Drive Imaging
«
Reply #7 on:
August 15, 2008, 03:52:19 PM »
Working in forensics, I can tell you that there are few things out there faster then dd/dcfldd. FTK Imager is a great tool (although windows only) that also support compression. Linen is another tool from Guidance Software. Again, it's slower then dd. There are tons of front ends to dd, including Adelpto and Air. We use a Helix boot cd for imaging with dd.
Logged
blackazarro
Sr. Member
Offline
Posts: 254
Re: Drive Imaging
«
Reply #8 on:
August 19, 2008, 11:15:08 PM »
In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.
We also use what oleDB mentioned, liveview for booting the image.
All these tools are free so that's why we use it. Our budget is limited.
Logged
Security+, OSCP, CEH
BillV
Hero Member
Offline
Posts: 880
Re: Drive Imaging
«
Reply #9 on:
August 20, 2008, 07:06:43 AM »
Quote from: blackazarro on August 19, 2008, 11:15:08 PM
In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.
Is there a switch to show "time remaining"? I thought I saw this somewhere, but by default with no switches it just shows data copied.
That's pretty much the route I've chosen to go after testing with dd once already. Unfortunately, I am unable to even boot my laptop with any Live CD so I will have to figure something else out (probably open up my desktop and connect both drives via SATA then boot up that computer with a Live CD).
Thanks for all of the replies. I think I've downloaded and played with everything recommended, but it looks like something simple like dd is going to do the trick. The only other thing I've yet to try is Acronis.
BillV
Logged
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Special Events
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009
=> News Items and General Discussion About EH-Net
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> Certification
===> The Charter Study Group - Pen Test
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
=====> CEH - Official Course Modules v4
=====> CEH - Official Course Modules v5
=====> CEH - Official Course Modules v6
===> CPTS - Certified Pen Testing Specialist
=====> CPTS - Official Course Modules v5
===> CPTE - Certified Pen Testing Expert
=====> CPTE - Official Course Modules v1
===> ECSA - EC-Council Certified Security Analyst
=====> ECSA - Official Course Modules v1.2
=====> ECSA / LPT - Official Course Modules v3
===> OSCP - Offensive Security Certified Professional
===> GPEN - GIAC Certified Penetration Tester
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
=====> CHFI - Official Course Modules v2
===> EnCE - EnCase® Certified Examiner
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Hardware
=> Malware
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Gates
=> Heffner
=> Hoffman
=> RichM
=> Murray
=> J. Peltier
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
Loading...
Sponsors
Polls
How many security events including conferences and training do you attend a year:
1 - 2
3 - 4
5 - 6
7+
None - But want to
None - Choose not to
Support EH-Net
Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
Try CBT Nuggets Free!
Recent Forum Topics
Book Reviews
: [Article]-Mitnick - The Art Of Intrusion: Ch 1 - Hacking The Casinos For A Million Bu...
(4) by
ethicalhack3r
Book Reviews
: Need a book suggestion!
(0) by
ethicalhack3r
News Items and General Discussion About EH-Net
: [Article]-Jan 2009 Free Giveaway Sponsor - Black Hat DC
(0) by
don
News Items and General Discussion About EH-Net
: EH-Net Milestone - 2 Articles Cross 1 Million Page Views
(3) by
BillV
Other
: What kind of lab, machines you have for your security testing?
(12) by
charlottebandit
Wireless
: Wireless Pen Testing Cards
(5) by
charlottebandit
Oct 2008 - Scooby Doo and the Crypto Caper
: [Article]-Scooby Doo and the Crypto Caper - Answers and Winners
(1) by
vijay2
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Creative
(0) by
don
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Technical
(0) by
don
Malware
: Network Virus Problem
(9) by
RoleReversal
Wireless
: WUSB600N good usb ?
(2) by
nap191
News from the Outside World
: Is this acceptable?
(8) by
NickFnord
Other
: FBI code cracking challenge
(3) by
jimbob
Calendar Of Events
: RSA 2009
(0) by
don
Forensics
: Network Forensic tools/practice/techniques
(2) by
jimbob
Malware
: Autoplay when i try to open the drive.
(4) by
jimbob
Physical Security
: Magnetic stripe card spoofing
(4) by
jimbob
Malware
: THe website is Evil but what to do??
(1) by
jimbob
Links to cool sites.
: Free Computer Engineering Classes From Stanford
(1) by
jason
Other
: Insanity?
(3) by
jason
CEH - Certified Ethical Hacker
: CEH is a scam
(14) by
jason
CEH - Certified Ethical Hacker
: Any Practice Environment for learning tool for CEH?
(15) by
don
Wireless
: a petri-dish bridge
(2) by
don
CEH - Certified Ethical Hacker
: TFTP Tranfer time out
(5) by
jason
Tools
: tool to trace users
(8) by
pseud0
Malware
: Malware Challenge 2008 Analysis
(0) by
blackazarro
Programming
: Python 3.0 Released
(0) by
don
Forensics
: SANS SIFT Forensic toolkit
(1) by
don
Links to cool sites.
: Omgili Hacking - Another Search Engine dedicated to Hacking Related Forums
(2) by
RoleReversal
Tools
: Insecure.org's 2006 Top 100 Security Tools List Released
(10) by
shednik
Malware
: Security Forecast for 2009
(4) by
shednik
Other
: Happy New Year!
(8) by
vijay2
CEH - Official Course Modules v6
: Community-built CEH Wiki
(2) by
yehg
Links to cool sites.
: 25C3 25th Chaos Communication Congress
(4) by
alan
Other
: Math Review
(3) by
don
Other
: will this get me anywhere?
(5) by
jason
Physical Security
: Cloning the e-passport
(0) by
jason
Dec 08 - Santa Claus Is Hacking to Town
: [Article]-Santa Claus is Hacking to Town
(10) by
vijay2
Vote For EH-Net
progenic.com
binarica.com
technorati fave
Privacy Notice
for TDCC & All Properties
© 2009 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.