Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Carving tools
Ethical Hacker Community Forums
December 04, 2008, 04:48:05 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Carving tools  (Read 2690 times)
0 Members and 1 Guest are viewing this topic.
jimbob
Sr. Member
****
Offline Offline

Posts: 319



View Profile WWW
« on: August 14, 2006, 09:32:34 AM »

Hi,
I was looking at an example forensics exercise one the web...

http://www.certified-computer-examiner.com/cce-samp.htm

After doing all the usual things I surmised that I needed a tool to carve deleted MS Office document from the image. Not having much experience with carving tools I thought I'd throw this open to the good people here for suggestions and advice. Are there any good free/open source carvers out there?

Jim
Logged
pcsneaker
Jr. Member
**
Offline Offline

Posts: 73


View Profile
« Reply #1 on: August 14, 2006, 09:58:49 AM »

Foremost is an OpenSource Solution.
Logged

MCSA:Security (W2k, W2k3)
MCSE:Security (W2k, W2k3)
CPTS, Network+
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2383


Editor-In-Chief


View Profile WWW
« Reply #2 on: August 14, 2006, 10:35:27 AM »

Try these 2 as recommended by the Curriculum Developer for CCE:

DataLifter - Retail Product, Pricier
http://www.datalifter.com/

Simple Carver - Fast and Cheap
http://www.filesig.co.uk/simplecarver.html

Hope this helps,
Don
Logged

CISSP, MCSE, CEH, Security+ SME
jimbob
Sr. Member
****
Offline Offline

Posts: 319



View Profile WWW
« Reply #3 on: August 15, 2006, 04:27:29 AM »

I tried foremost. It was a small source download, compiled cleanly under cygwin and worked first time to recover the files from the floppy image. Nice!

Jim
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.048 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.