Skip to content

NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.

Notifications You must be signed in to change notification settings

RedCursorSecurityConsulting/NTFSCopy

 
 

Repository files navigation

NTFSCopy

This project is based on https://github.com/LordMike/NtfsLib. I have made the NTFSCopy tool usable with execute-assembly in Cobalt Strike. This was done using ILMerge to make a single executable without any dependencies, and removing the fancy colored progress bar which Cobalt Strike couldn't handle (seems like Console.Seek() was throwing an exception).

Use

Clone the repository and build the NTFSCopy project within the solution. example

License

This project is under the MIT license. As such you are allowed to modify and use the code, but are required to attribute me when using it.

About

NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C# 100.0%