What is Alternate Data Stream??
In simple words it is a facility to hide data behind data.
This can be used to hide malicious virus files behind other text or graphic files.
How to hide text file behind a text file??
Here is an example to hide text file behind a text file.
1> Create a text file using Command Prompt.
Go to Run, type cmd. Change the directory if you want.
Type
echo visit etricks.in for cool computer tricks > etricks.txt:hidden
Here hidden is alternate data stream created along with etricks.txt
2>To enter data using that hidden data stream type
notepad etricks.txt:hidden
You will see a popup saying “Cannot find the C:\etricks.txt:Hidden.txt file”. Do you want to create a new file?”.
click yes.
3> Type anything you want and press ctrl+s.
4> Now go to C drive. There won’t be any such file. You will see etricks.txt only.
5> To view data in hidden file go to cmd and type
notepad etricks.txt:hidden
and now you can see the data in etricks.txt:hidden.txt
How to hide .exe file behind txt file??
Procedure is quite similar to the above one.
c:\> type c:\windows\notepad.exe > hello.txt:note.exe
Here notepad.exe is copied to hello.txt:note.exe
Now when you copy hello.txt, note.exe is also copied along with it.
If you have any queries you can ask me here.
No comments:
Post a Comment