/wsr/ - Worksafe Requests » Thread #899121

[13 / 2 / ?]

164KiB, 462x600, 1520195599713.png

Anonymous Mon 05 Oct 2020 03:14:58 No.899121 View View Reply Original Report

I would like to break a small NTFS partition so that it is unmountable and unfixable, but without corrupting the files on it. This is for testing/educational purposes only. Does anyone have any idea how this can be achieved?

Anonymous

Anonymous Mon 05 Oct 2020 03:31:37 No.899130 Report

Quoted By:

>>899121
Ive thought on this for a bit but do t really know what you want, data recovery is pretty good if the files are not corrupted you should be able to restore them from the partion, I guess you could put the drive on a platter disc and then erase the directory of all the information, you wouldn’t be able to boot or mount anything but all the files are still their theirs just no way of knowing where they are without reading the whole disc and running the progrums the cops use to find. “Discarded” but not bleached data

Anonymous

Anonymous Mon 05 Oct 2020 21:57:56 No.899581 Report

Quoted By:

i want to break a partition beyond repair so i can test some recovery softwares.

Anonymous

View Same Google ImgOps iqdb SauceNAO 3BCD4C26-DEAB-41B0-80E4-8433FAD9 (...).jpg, 105KiB, 1125x236

Anonymous Mon 05 Oct 2020 22:03:12 No.899583 Report

Quoted By: >>899590

>>899121
Delete the word "NTFS" from the header, or change the sector size.

Anonymous

Anonymous Mon 05 Oct 2020 22:09:22 No.899587 Report

Quoted By:

so overwrite the first 8 bytes?

Anonymous

Anonymous Mon 05 Oct 2020 22:13:49 No.899590 Report

Quoted By: >>899629

>>899583
I tried this and fixntfs fixes it. it does break it though.

Anonymous

Anonymous Mon 05 Oct 2020 23:07:52 No.899629 Report

Quoted By: >>899791

>>899590
Cool, I guess that's a useful datum for your "testing" then. I guess it wouldn't be so useful if you were trying to extort someone by breaking their computer in a way only you could fix, but oh well.

Anonymous

Anonymous Tue 06 Oct 2020 05:23:42 No.899791 Report

Quoted By: >>900013

>>899629
im just trying to figure out how this could happen to a partition as well. And i am not "breaking a computer." the only one whos data I'm trying to corrupt is my own. you sound like a braindead moron.

Anonymous

Anonymous Tue 06 Oct 2020 15:21:45 No.899960 Report

Quoted By:

>>899121
Delete the MFT and MFT mirror. Done. All the files are still there, the filesystem just has no idea where they are.

Anonymous

Anonymous Tue 06 Oct 2020 16:08:12 No.899983 Report

Quoted By: >>899987

Addendum to above post: any fragmented files will be fucked. Not all files will be recoverable, because the software will have to guess where the file begins and ends based on the header, and not all files use easily recognizable readers. For instance, anything that starts with 50 4B 03 04 could be a zip file.

Anonymous

Anonymous Tue 06 Oct 2020 16:16:05 No.899987 Report

Quoted By: >>899995

>>899983
I don't think you're correct about this:

1) this will delete any resident files, because their data is inside the MFT
2) deleting the MFT doesn't seem to trash subdirectories, because they have their own little self-contained sub-MFTs that include extent maps.

Anonymous

Anonymous Tue 06 Oct 2020 16:30:20 No.899995 Report

Quoted By: >>900013

>>899987
You're probably right, I've never had to answer a question like this before. "how do I kinda sorta destroy my data but not really" is usually not what people ask. I'm not sure how else to answer the question though. chkdsk will fix the bitmap so it can't be that... maybe setting all clusters as having bad sectors?

Anonymous

Anonymous Tue 06 Oct 2020 16:55:35 No.900013 Report

Quoted By:

>>899995
Given how secretive OP's being and how defensive he got in >>899791, it's almost certainly on to something.

Capcode	All Only User Posts Only Verified Posts Only Moderator Posts Only Manager Posts Only Admin Posts Only Developer Posts Only Founder Posts
Show Posts	All Only With Images Only Without Images Only Spoiler Images Only Non-Spoiler Images
Deleted Posts	All Only Deleted Posts Only Non-Deleted Posts
Ghost Posts	All Only Ghost Posts Only Non-Ghost Posts
Post Type	All Only Sticky Threads Only Opening Posts Only Reply Posts
Results	All Grouped By Threads
Order	Latest Posts First Oldest Posts First

On these archives

Your latest searches