[foofus-tools] Fgdump/Ophcrack question

Ron ron at skullsecurity.net
Sun May 30 09:29:07 PDT 2010

When you say "Desktop", I assume you mean Windows? Which version of Windows, and which filesystem (I'm assuming NTFS?)

Ophcrack can definitely read any NTFS-based filesystem, but it may require manually mounting it. From Ophcrack, run "dmesg | grep sd" and "dmesg | grep hd" -- Hopefully, you'll see drives like sda2, hda2, etc. One is going to be your CDRom, that isn't what you want, but one should be your actual harddrive. Mount it like this:

mkdir /mnt/tmp
mount /dev/sda1 /mnt/tmp

Then check if /mnt/tmp countains what you want. If not, umount it with:
umount /mnt/tmp

And try the next drive. 

Hope that helps! 

On Fri, 28 May 2010 12:47:45 -0700 (PDT) steve williams
<speedracer850 at yahoo.com> wrote:
> Hi! I have burned Ophcrack to a disc and booted my computer
> successfully with it. Previously, I have run FGdump and it
> successfully created a hash file.
> The Problem: when I boot up with the Ophcrack disk and search for the
> hash file on the desktop, it only sees a Tux folder with nothing in
> it. It does not recognize my hard drive. 
> How does FGdump work with Ophcrack?
> Do you guys have any idea how to help?

Ron Bowes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.foofus.net/pipermail/foofus-tools-foofus.net/attachments/20100530/f43c09d9/attachment-0004.pgp>

More information about the foofus-tools mailing list