alphasec academy

attrib +h malware.pdf.js - oznacz plik jako ukryty (Hidden) w wierszu poleceń (cmd.exe)

Dodatkowe informacje

Podobnie jak w protipie 0088 ukrywamy wskazany plik lub katalog, tym razem bez PowerShella. By dany plik/katalog od-ukryć, należy wykorzystać
+s
:
attrib +s malwarej.pdf.js
Żeby oznaczyć plik lub katalog jako systemowy, użyjemy
+s
.

Co jeszcze może attrib.exe?

KradnącCytując ze strony Microsoftu:
Parameter Description
{+\|-}r Sets (+) or clears (-) the Read-only file attribute.
{+\|-}a Sets (+) or clears (-) the Archive file attribute. This attribute set marks files that have changed since the last time they were backed up. The xcopy command uses archive attributes.
{+\|-}s Sets (+) or clears (-) the System file attribute. If a file uses this attribute set, you must clear the attribute before you can change any other attributes for the file.
{+\|-}h Sets (+) or clears (-) the Hidden file attribute. If a file uses this attribute set, you must clear the attribute before you can change any other attributes for the file.
{+\|-}o Sets (+) or clears (-) the Offline file attribute.
{+\|-}i Sets (+) or clears (-) the Not Content Indexed file attribute.
{+\|-}x Sets (+) or clears (-) the Scrub file attribute.
{+\|-}p Sets (+) or clears (-) the Pinned file attribute.
{+\|-}u Sets (+) or clears (-) the Unpinned file attribute.
{+\|-}b Sets (+) or clears (-) the SMR Blob file attribute.
[<drive>:][<path>][<filename>] Specifies the location and name of the directory, file, or group of files that you want to view or change attributes.
You can use the ? and * wildcard characters in the filename parameter to display or change the attributes for a group of files.
/s Applies attrib and any command-line options to matching files in the current directory and all of its subdirectories.
/d Applies attrib and any command-line options to directories.
/l Applies attrib and any command-line options to the Symbolic Link, rather than the target of the Symbolic Link.
/? Displays help at the command prompt.

Przydatne linki


Subskrybuj

Jeśli chcesz otrzymywać nowe, mięsiste protipy na maila, a także zostać czasem powiadomiony o wartościowych wydarzeniach - dołącz do subskrybentów.