dasec / fishy

Toolkit for Filesystem based Data Hiding Techniques.
MIT License
36 stars 1 forks source link

APFS Timestamp Hiding Utilities #40

Open MC68 opened 5 years ago

MC68 commented 5 years ago

Several improvements can/have to be made to the APFS Timestamp technique:

  1. The choice of which timestamps should be written to needs to be simplified and accessible from the console (right now, the code would have to be changed).

  2. Instead of writing to 4 bytes, the technique should only write to 30 bits.