Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 73 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Erased Hard-Drive
EH-Net
May 21, 2013, 03:31:46 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Erased Hard-Drive  (Read 7909 times)
0 Members and 1 Guest are viewing this topic.
str8jack3t
Newbie
*
Offline Offline

Posts: 7


View Profile
« on: June 28, 2011, 02:09:23 AM »

All-

I have two PC's setup and I'm trying to dump one of the hard-drives to the point where there is no trace of how it was dumped and NO reverse engineering can be done to determine the cause. Is there a method? If so, would I also have to dump/clear the memory?

Thank you in advance!
Logged
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #1 on: June 28, 2011, 10:08:55 AM »

Look around for a live linux cd with the shred utilty on it. Read up on the program too. I think standard is 7 passes, but I could be wrong. I do 23 (because I can), last should always be random.
Logged

OSWP, Sec+
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #2 on: June 28, 2011, 10:10:49 AM »

I use DBAN works great!
Logged

CCENT, A+, Network+, Security+
Joshsevo
Sr. Member
****
Offline Offline

Posts: 278


View Profile
« Reply #3 on: June 28, 2011, 01:52:06 PM »

Even if you do wipe it, it will still show that it was wiped.
Logged

Security+, Network+, C|EH, CHFI, CPT
str8jack3t
Newbie
*
Offline Offline

Posts: 7


View Profile
« Reply #4 on: June 28, 2011, 02:02:25 PM »

Thank for the info to all!

Joshsevo-  Is there anyway to mask that?  I mean can it look like a complete crash/erase? From some program that took over and ran an erase? Another question - Should I also perform a wipe/dump on the memory to get rid of my history? I'm trying to have everything cleaned w/o trace?  I appreciate the feedback!!!
Logged
Joshsevo
Sr. Member
****
Offline Offline

Posts: 278


View Profile
« Reply #5 on: June 28, 2011, 03:02:37 PM »

The only way may be to reload a Operating system back onto the HD after you wipe it.  Once you wipe it, it leaves a signature of the software used to wipe it, such as DBAN.

Even a crashed drive can still be recovered.  The bad sectors may not be recovered but some files may be able to be recovered.

Best bet is to wipe or to drive a nail through the HDD in a few spots.
Logged

Security+, Network+, C|EH, CHFI, CPT
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #6 on: June 28, 2011, 04:33:01 PM »

Acid dip that beast :-D
Logged

CCENT, A+, Network+, Security+
Joshsevo
Sr. Member
****
Offline Offline

Posts: 278


View Profile
« Reply #7 on: June 28, 2011, 05:22:18 PM »

LOL.^^
Logged

Security+, Network+, C|EH, CHFI, CPT
El33tsamurai
Full Member
***
Offline Offline

Posts: 192


View Profile
« Reply #8 on: June 28, 2011, 06:13:46 PM »

Thought you might like that
Logged

CCENT, A+, Network+, Security+
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.09 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.