Metasploit Anti-Forensic Investigation Arsenal (MAFIA)
Januari 19, 2008
Timestomp – First ever tool that allows you to modify all four NTFS timestamp values: modified, accessed, created, and entry modified.
Slacker – First ever tool that allows you to hide files within the slack space of the NTFS file system.
Sam Juicer – A Meterpreter module that dumps the hashes from the SAM, but does it without ever hitting disk.
Transmogrify – First ever tool to defeat EnCase’s file signaturing capabilities by allowing you to mask and unmask your files as any file type. (Coming Soon)
Entry Filed under: Hacking. .
Trackback this post | Subscribe to the comments via RSS Feed