RawFS (Raw File System)
来源:互联网 发布:2017悬疑推理网络剧 编辑:程序博客网 时间:2024/05/17 01:33
When storing multiple files on unpartitioned space there must be a specification how they are stored. For dedicated attacks (if only 1 file need to be stored) then only the file could be stored raw, however, I want to have a flexible solution where I can store multiple files and acces them via file names. An advantage of this is the better abstraction of hiding and accessing files which can be done via a driver in Windows.
RawFS structures the file system into sectors (512 byte blocks). It is intended to be easy and most flexible with less efforts in reading and writing.
The first sector contains the File Table which tells the location of files and the position of the next File Table.
Every file table is structured as:
- 512 bytes of size
- contains 16 entries with each 32 byte of size
- each entry has following format
+ 0 8 bytes Sector number of the file
+ 8 8 bytes Size (in bytes) of the file
+ 16 16 bytes MD5 hash of the file name
---------------------------------------------
32 bytes per entry
- special entries (md5 of the names)
D41D8CD98F00B204E9800998ECF8427E File Table
The next File Table is pointed to by the file "". There is only one (the first found) next File Table valid. If a file name is requested, the md5 must be generated and compared against all md5 hashes of the file table. Only the file name without any slashes and paths may be used for generating the md5.
- RawFS (Raw File System)
- Bypassing Raw File System I/O Rootkit Detector
- Effective file hiding : Bypassing Raw File System I/O Rootkit Detector
- Effective file hiding : Bypassing Raw File System I/O Rootkit Detector
- file system
- file system
- File system
- File System Drivers & File System Filter Drivers
- Raw Logical Volumes vs. File Systems
- view raw yuv file with mplayer
- android copy raw file to sdcard
- Android Studio new raw/assets file
- The proc File System:
- The System.map File
- mount file system
- mount file system
- Google File System(中文翻译)
- embedded system (control file )
- table取childNodes对象子节点
- SUSE11安装时禁用防火墙
- VC++ 如何创建一个线程并传递参数
- 静态接口DLL(IMPORT_C and EXPORT_C)(转)
- MyEclipse下XFire开发Webservice实例
- RawFS (Raw File System)
- pz伯伯的番茄排序
- map的一种替代方案,不会自动排序
- 使用truss、strace或ltrace诊断软件问题
- ASP.NET - XML Web 服务器控件概述
- 文件上传功能
- ASP.NET将Web站点下的绝对路径转换为虚拟路径
- 解决IE下图片渐隐渐现效果,图片出现“坏点”的bug
- ASP.NET(C#)通用数据库类