Metasploit Anti-For...
 
Notifications
Clear all

Metasploit Anti-Forensics

4 Posts
3 Users
0 Likes
841 Views
(@vrocco)
Posts: 33
Eminent Member
Topic starter
 

Has anyone played around with the tools at http//www.metasploit.com/projects/antiforensics/ ? I played around a bit and even wrote a quick GUI for TimeStomp.

However, I am getting some errors in both TimeStomp and Slacker that I don't understand. I don't know if I am doing something wrong or if it is the code.

I tried emailing vinnie at metasploit, but he hasn't gotten back to me yet. If anyone has experience with these tools, please email me or post here. I have a GUI for Slacker ready to go as well, I just need to get these errors worked out.

Thanks!

 
Posted : 19/03/2007 11:34 pm
skip
 skip
(@skip)
Posts: 57
Trusted Member
 

Has anyone played around with the tools at http//www.metasploit.com/projects/antiforensics/ ? I played around a bit and even wrote a quick GUI for TimeStomp.

However, I am getting some errors in both TimeStomp and Slacker that I don't understand. I don't know if I am doing something wrong or if it is the code.

I tried emailing vinnie at metasploit, but he hasn't gotten back to me yet. If anyone has experience with these tools, please email me or post here. I have a GUI for Slacker ready to go as well, I just need to get these errors worked out.

Thanks!

The folks at metasploit have individual blogs you could look there.
And the folks that release BackTrack (has the metasploit framework and the anti-forensic tools on it) have a forum.
You could join that forum and ask there as well.
forums.remote-exploit.org

I've only used timestomp. I didn't have any problems just using it and the help that came along with it….but I didn't try to do anything complicated.

good luck
skip

 
Posted : 22/03/2007 5:50 pm
(@vrocco)
Posts: 33
Eminent Member
Topic starter
 

I figured out my problems with Timestomp. My frontend for it is done if anyone wants to check it out. I will send it on request.

Still having problems with slacker though.

As soon as I get them worked out, I will have a frontend for that done too.

 
Posted : 02/04/2007 11:00 pm
(@echo6)
Posts: 87
Trusted Member
 

I get the following on a few machines here when running timestomp

Error NtSetInformationFile failed.
Error SetFileMACE().
Error SetMinimumTimeValues()

I had a response from Vinnie, he wasn't able to reproduce this issue on his 'puter.

 
Posted : 28/04/2007 12:29 am
Share: