+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] RootDisk - Yet another real FileSystem (No Virtual FileSystem) (/showthread.php?tid=2631629)
RootDisk - Yet another real FileSystem (No Virtual FileSystem) - DragonHunter - Jun 29, 2012
Hey guys whats up, Just wanted to showoff RootDisk which is a FileSystem I'm working at have been working on it for a few days already
But ye I just wanted to know what I could add or what you guys would like to see
There are not so many features yet however I'm still working on this till the end because I want to use it for my server pc
The goal of the RootDisk FileSystem is simple: Get the most out of your harddrive and compress everything
With this I mean that you can go ahead and change settings in the FileSystem like hiding files/directories, denying access for specific processes etc
I'd appreciate it if you guys have some cool idea's I could add 🤝
Current Features:
Create a new harddrive file
Mount/Unmount drive
View the IO performance such as requests, reads, writes
Hide all files/directories
Process blacklist - block any process PID or name
Process whitelist - When the whitelist is enabled only the programs which are in the whitelist can access the disk
Anything you did in the drive will be saved to a single file, like creating files/directories/writing to a file etc
Create a file/directory
Delete files/directories
Compress files using QuickLZ
Temp Disk - Any changes will not be saved
Lock disk - Disallow anyone reading/writing to the disk
Creates reserved space for a directory/file that was deleted
On todo list:
Dynamic space
Filter - Filter out names, extensions you want to hide
Select the drive letter to mount the disk
Reading data from files
Encryptions, AES, Unsafe Poly XOR, Blowfish
Notification for the old 'drive is nearly full'
Option to confirm or deny newly created files,
Duplicate file checking,
Suicide option. (Password for secure destruction of all files)
Remotely accessing the harddisk - TCP
Keep in mind that this is a real file system using the kernel and a driver and it can even block anti-virus software from accessing the disk if you blacklisted your AV
Also keep in mind that when you lets say only whitelisted the Explorer.exe no other process can access the disk so if a RAT will try to access it he will get access denied
This is a really great feature if you want to be sure no one else can access it other then the Explorer.exe to keep away the stealers or even file infectors
A few screenshots
[img]http://img560.imageshack.us/img560/9911/53856659.png[/img]
[img]http://img834.imageshack.us/img834/5093/75439542.png[/img]
[img]http://img832.imageshack.us/img832/6264/84469035.png[/img]
Only giving Cmd access to the disk
[img]http://img685.imageshack.us/img685/5433/capture5iq.png[/img]
Blocking CMD from getting access to disk
[img]http://img403.imageshack.us/img403/2278/capture4r.png[/img]
Just a simple proof it's FileSystem is RootDisk and not NTFS or FAT
[img]http://img232.imageshack.us/img232/1585/capture6j.png[/img]
* - Perplexity - Jun 29, 2012
Holy shit this is amazing, nice work as always DragonHunter, I love your projects ;D
* - TomTheBeast - Jun 29, 2012
This is awesome, How much work and time did you put into this? I'm guessing its a lot.
* - Exit - Jun 29, 2012
It's awesome..
Pops' always so smart n' creative..
* - Aeonhack Archivist - Jun 29, 2012
This is an absolutely fantastic idea. So great to see yet another great project by a great coder. Can't wait to see where this goes.
* - iVision - Jun 29, 2012
Looks good if I see the features man! But what is a RootDisk? I tried to google couldn't find anything. Is it just a Partition? Or some USB?
* - DragonHunter - Jun 29, 2012
(Jun 29, 2012 09:45 AM)iVision Wrote: Looks good if I see the features man! But what is a RootDisk? I tried to google couldn't find anything. Is it just a Partition? Or some USB?RootDisk is the file system I'm currently making
* - Aeonhack Archivist - Jun 29, 2012
I have a question. Will this be open source? I have been a big fan of your other projects dating all the way back to PyramidAttack (your XNA game) and XtremePC. I have been learning from all of the source codes you released and you played a major role in my moving onto C# from VB. Can't wait to see what the future holds for you and your projects.
* - DragonHunter - Jun 29, 2012
(Jun 29, 2012 09:57 AM)KABAHN Wrote: I have a question. Will this be open source? I have been a big fan of your other projects dating all the way back to PyramidAttack (your XNA game) and XtremePC. I have been learning from all of the source codes you released and you played a major role in my moving onto C# from VB. Can't wait to see what the future holds for you and your projects.haha nice to hear ^_^, I don't know yet if I'll make this opensource yes or no but will see by the time I'll release it
* - Aeonhack Archivist - Jun 29, 2012
Ok, well either way, I can't wait for this to be released. It is looking real sharp right now. Where do you learn all this stuff? I mean you seem to have vast knowledge on topics ranging from assembly to networking right, right down to creating file systems and emulated languages. It is incredible and I envy your skills.
* - iVision - Jun 29, 2012
(Jun 29, 2012 09:48 AM)DragonHunter Wrote: RootDisk is the file system I'm currently making
Oeff its the name sorry bro :P You confused me with no Virtual FileSystem :P
(Jun 29, 2012 10:15 AM)KABAHN Wrote: Ok, well either way, I can't wait for this to be released. It is looking real sharp right now. Where do you learn all this stuff? I mean you seem to have vast knowledge on topics ranging from assembly to networking right, right down to creating file systems and emulated languages. It is incredible and I envy your skills.
Probably the real job is done by libraries he has coded in C/C++. At least that is what I think, it would be insane if he hooked kernel mode in C#.
What functions do you accutally hook? NtQueryDirectoryFile or something?
Good luck further! And sorry i do not know any ideas :P
How do you hide? Just the Hidden FileAttribute or some rootkit stuff? Maybe you could select a file that hide from the process list? But that has not really to do with a FileSystem.
Maybe some Context Menu thing? Like right click on file that Menu thing, and then Rootkit > Hide or something :P
* - simonbenyo - Jun 29, 2012
its great i like ring0 😉 good job 🙂
* - DragonHunter - Jun 29, 2012
(Jun 29, 2012 10:42 AM)iVision Wrote: Oeff its the name sorry bro :P You confused me with no Virtual FileSystem :PNothing is being hooked in the kernel not so far I know and Hidden is 100% hidden and not some attribute, Even AV's being at kernel mode wouldn't be able to get any file when you hide files
Probably the real job is done by libraries he has coded in C/C++. At least that is what I think, it would be insane if he hooked kernel mode in C#.
What functions do you accutally hook? NtQueryDirectoryFile or something?
Good luck further! And sorry i do not know any ideas :P
How do you hide? Just the Hidden FileAttribute or some rootkit stuff? Maybe you could select a file that hide from the process list? But that has not really to do with a FileSystem.
Maybe some Context Menu thing? Like right click on file that Menu thing, and then Rootkit > Hide or something :P
* - CyNecx - Jun 29, 2012
man you have to teach me c++ ... c++ is fucking me hard -_- (Too much datatyps ...)
looks great ...(Using driver ?)
btw what theme you are using ...??(Windows ..)
* - x64 - Jun 29, 2012
Wow this is some awesome/difficult work!
Goodluck bro!