Metasploit Anti-For...
 
Notifications
Clear all

Metasploit Anti-Forensics  

  RSS
vrocco
(@vrocco)
Junior Member

Has anyone played around with the tools at http//www.metasploit.com/projects/antiforensics/ ? I played around a bit and even wrote a quick GUI for TimeStomp.

However, I am getting some errors in both TimeStomp and Slacker that I don't understand. I don't know if I am doing something wrong or if it is the code.

I tried emailing vinnie at metasploit, but he hasn't gotten back to me yet. If anyone has experience with these tools, please email me or post here. I have a GUI for Slacker ready to go as well, I just need to get these errors worked out.

Thanks!

Quote
Posted : 19/03/2007 11:34 pm
skip
 skip
(@skip)
Member

Has anyone played around with the tools at http//www.metasploit.com/projects/antiforensics/ ? I played around a bit and even wrote a quick GUI for TimeStomp.

However, I am getting some errors in both TimeStomp and Slacker that I don't understand. I don't know if I am doing something wrong or if it is the code.

I tried emailing vinnie at metasploit, but he hasn't gotten back to me yet. If anyone has experience with these tools, please email me or post here. I have a GUI for Slacker ready to go as well, I just need to get these errors worked out.

Thanks!

The folks at metasploit have individual blogs you could look there.
And the folks that release BackTrack (has the metasploit framework and the anti-forensic tools on it) have a forum.
You could join that forum and ask there as well.
forums.remote-exploit.org

I've only used timestomp. I didn't have any problems just using it and the help that came along with it….but I didn't try to do anything complicated.

good luck
skip

ReplyQuote
Posted : 22/03/2007 5:50 pm
debaser_
(@debaser_)
Active Member

I have played with timestomp briefly, but havent made much progress with slacker. I'll give it another shot this week.

ReplyQuote
Posted : 30/03/2007 5:58 am
vrocco
(@vrocco)
Junior Member

I figured out my problems with Timestomp. My frontend for it is done if anyone wants to check it out. I will send it on request.

Still having problems with slacker though.

As soon as I get them worked out, I will have a frontend for that done too.

ReplyQuote
Posted : 03/04/2007 12:00 am
echo6
(@echo6)
Member

I get the following on a few machines here when running timestomp

Error NtSetInformationFile failed.
Error SetFileMACE().
Error SetMinimumTimeValues()

I had a response from Vinnie, he wasn't able to reproduce this issue on his 'puter.

ReplyQuote
Posted : 28/04/2007 1:29 am
Share: