spudw2k Posted December 22, 2007 Share Posted December 22, 2007 (edited) Code is Below on Post #7Ok, this is pretty cool if I say so myself. I had no need for such a tool, but now that I got one it may prove useful. This tool takes advantage of Alternate Data Streams in Windows XP. I'm pretty sure it'll work with 2000 to 2003, but I don't have Vista to test on; but anyways, back to the good stuff. What is unique about ADStreams is that you can hide information without altering the size of the file. Alternate Data Streams can only exist on NTFS Filesystems (Destination File Only). Here is an article describing ADS.*This tool/script uses/requires streams.exe by Sysinternals.Functions: Hide file(s) within another file without altering integrity.Browse and open hidden streams.Delete streams from file.Hiding large files takes a while. Looking on how to optimize before releasing code. Fell free to ask questions or comment.Code is Below on Post #7 Edited May 15, 2009 by spudw2k Spoiler Things I've Made: Always On Top Tool ◊ AU History ◊ Deck of Cards ◊ HideIt ◊ ICU ◊ Icon Freezer ◊ Ipod Ejector ◊ Junos Configuration Explorer ◊ Link Downloader ◊ MD5 Folder Enumerator ◊ PassGen ◊ Ping Tool ◊ Quick NIC ◊ Read OCR ◊ RemoteIT ◊ SchTasksGui ◊ SpyCam ◊ System Scan Report Tool ◊ System UpTime ◊ Transparency Machine ◊ VMWare ESX Builder Misc Code Snippets: ADODB Example ◊ CheckHover ◊ Detect SafeMode ◊ DynEnumArray ◊ GetNetStatData ◊ HashArray ◊ IsBetweenDates ◊ Local Admins ◊ Make Choice ◊ Recursive File List ◊ Remove Sizebox Style ◊ Retrieve PNPDeviceID ◊ Retrieve SysListView32 Contents ◊ Set IE Homepage ◊ Tickle Expired Password ◊ Transpose Array Projects: Drive Space Usage GUI ◊ LEDkIT ◊ Plasma_kIt ◊ Scan Engine Builder ◊ SpeeDBurner ◊ SubnetCalc Cool Stuff: AutoItObject UDF ◊ Extract Icon From Proc ◊ GuiCtrlFontRotate ◊ Hex Edit Funcs ◊ Run binary ◊ Service_UDF Link to comment Share on other sites More sharing options...
Nahuel Posted December 22, 2007 Share Posted December 22, 2007 So.. you posted here just to say you had done it but didn't put any script? Link to comment Share on other sites More sharing options...
timgames Posted December 22, 2007 Share Posted December 22, 2007 (edited) (snip) there is a easy way: open up cmd type this copy /b filetohidein.jpg + filetohide.zip newfile.jpg and then open newfile.jpg with winrar Edited December 22, 2007 by timgames Link to comment Share on other sites More sharing options...
therks Posted December 22, 2007 Share Posted December 22, 2007 I wouldn't call it HideIt. There's already several pieces of software with that name. My AutoIt Stuff | My Github Link to comment Share on other sites More sharing options...
GaryFrost Posted December 22, 2007 Share Posted December 22, 2007 Moved to Support, maybe here you can figure out what you need to add to your 1st post to make it worthy to put in Examples. SciTE for AutoItDirections for Submitting Standard UDFs Don't argue with an idiot; people watching may not be able to tell the difference. Link to comment Share on other sites More sharing options...
spudw2k Posted December 22, 2007 Author Share Posted December 22, 2007 (snip)there is a easy way:open up cmd type thiscopy /b filetohidein.jpg + filetohide.zip newfile.jpgand then open newfile.jpg with winrar That's neat, but it alters the file. ADS does not. Spoiler Things I've Made: Always On Top Tool ◊ AU History ◊ Deck of Cards ◊ HideIt ◊ ICU ◊ Icon Freezer ◊ Ipod Ejector ◊ Junos Configuration Explorer ◊ Link Downloader ◊ MD5 Folder Enumerator ◊ PassGen ◊ Ping Tool ◊ Quick NIC ◊ Read OCR ◊ RemoteIT ◊ SchTasksGui ◊ SpyCam ◊ System Scan Report Tool ◊ System UpTime ◊ Transparency Machine ◊ VMWare ESX Builder Misc Code Snippets: ADODB Example ◊ CheckHover ◊ Detect SafeMode ◊ DynEnumArray ◊ GetNetStatData ◊ HashArray ◊ IsBetweenDates ◊ Local Admins ◊ Make Choice ◊ Recursive File List ◊ Remove Sizebox Style ◊ Retrieve PNPDeviceID ◊ Retrieve SysListView32 Contents ◊ Set IE Homepage ◊ Tickle Expired Password ◊ Transpose Array Projects: Drive Space Usage GUI ◊ LEDkIT ◊ Plasma_kIt ◊ Scan Engine Builder ◊ SpeeDBurner ◊ SubnetCalc Cool Stuff: AutoItObject UDF ◊ Extract Icon From Proc ◊ GuiCtrlFontRotate ◊ Hex Edit Funcs ◊ Run binary ◊ Service_UDF Link to comment Share on other sites More sharing options...
spudw2k Posted December 22, 2007 Author Share Posted December 22, 2007 (edited) Alright, alright. here's the code. ---Please move back into Examples.*Requires streams.exe by Sysinternals.edit: Updated code for v3.2.12.1 and added method from YourSpaceedit: Checked code against v3.3.0.0 and added Drag GUI code.Previous downloads: 40HideIt.au3 Edited May 15, 2009 by spudw2k Spoiler Things I've Made: Always On Top Tool ◊ AU History ◊ Deck of Cards ◊ HideIt ◊ ICU ◊ Icon Freezer ◊ Ipod Ejector ◊ Junos Configuration Explorer ◊ Link Downloader ◊ MD5 Folder Enumerator ◊ PassGen ◊ Ping Tool ◊ Quick NIC ◊ Read OCR ◊ RemoteIT ◊ SchTasksGui ◊ SpyCam ◊ System Scan Report Tool ◊ System UpTime ◊ Transparency Machine ◊ VMWare ESX Builder Misc Code Snippets: ADODB Example ◊ CheckHover ◊ Detect SafeMode ◊ DynEnumArray ◊ GetNetStatData ◊ HashArray ◊ IsBetweenDates ◊ Local Admins ◊ Make Choice ◊ Recursive File List ◊ Remove Sizebox Style ◊ Retrieve PNPDeviceID ◊ Retrieve SysListView32 Contents ◊ Set IE Homepage ◊ Tickle Expired Password ◊ Transpose Array Projects: Drive Space Usage GUI ◊ LEDkIT ◊ Plasma_kIt ◊ Scan Engine Builder ◊ SpeeDBurner ◊ SubnetCalc Cool Stuff: AutoItObject UDF ◊ Extract Icon From Proc ◊ GuiCtrlFontRotate ◊ Hex Edit Funcs ◊ Run binary ◊ Service_UDF Link to comment Share on other sites More sharing options...
enaiman Posted January 27, 2009 Share Posted January 27, 2009 Very nice job Thank you for sharing it. SNMP_UDF ... for SNMPv1 and v2c so far, GetBulk and a new example script wannabe "Unbeatable" Tic-Tac-Toe Paper-Scissor-Rock ... try to beat it anyway :) Link to comment Share on other sites More sharing options...
mehack Posted May 14, 2009 Share Posted May 14, 2009 Hey you all guy why you need the streams.exe from sysinternal dude we can use the filefinfirst and filefindnext function Cheers Link to comment Share on other sites More sharing options...
TurionAltec Posted May 14, 2009 Share Posted May 14, 2009 Because filefindfirst and filefindnext can't provide the following functionality? Func GetADStreams($filenamepath) RunWait(@comspec & " /c " & @tempdir & "\streams.exe " & chr(34) & $filenamepath & chr(34) & " > " & @Tempdir & "\streams.log","",@SW_HIDE) *snip* Func CleanFile($filepath) RunWait(@comspec & " /c " & @tempdir & "\streams.exe -d " & chr(34) & $filepath & chr(34),"",@SW_HIDE) EndFunc What I'm wondering is why we're calling @comspec for these two functions and passing the results to an intermediate text file instead of using Stdout, but I digress. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now