[WINDOWS] Directory Spoofing 02-21-2016, 12:10 PM
#1
There are many limitations to explorer's file management techniques and I am implementing one below to create *UNDELETABLE* folders. Undeletable with explorer or cmd (normal usage) till you format the disk.
Of course I will be providing ways to delete them !
Let's get started.
The thing is that explorer can't handle folders with whitespaces in the end of filenames very well. You can open them, explore them, modify it's contents, but that's it. They can't be renamed, deleted and the folder size shows 0bytes even with info inside.
But
Suppose you have a [normal] folder named "Recovery" in which you store all your files.
You want the intruder/guest/Liam to ignore those files in plain sight. What do you do?
Hide them?
He can view them still.
Use +s?
Still.
Use the shitty folder password .bat file?
It's not a joke.
Use a software?
Then why would I write this?
Here's what to do.....
Open the parent folder of the target folder in cmd (where your new folder will reside).
Write the following in the console ( replace [your folder] with the name of your folder )
IMPORTANT
You notice that whitespace after [your folder] and before " ? That's the nuke. Make sure you copy that character, it's not a space, nor [alt]+255
Also, the forwardslash (\) is also very important.
You have now created the undeletable folder.
But wait! The folder is undeletable, not it's files, and if you've noticed, there isn't a way to hide it. At all.
So you might be wondering why I am writing this thing if you can't hide it? Keep reading.....
Put all you secret files in the new folder that you made.
Now we will make a dummy folder, a decoy so that windows thinks the girl is in that one and sends Liam to get her.
Make a new folder in the same parent directory with the same name, [your folder] but this time without the white space.
Don't get it? Go to the parent folder, right click>New>Folder, enter "[your folder]" as name and hit enter. (This time no whitespace, don't include the quotes)
Put a dummy text file in the decoy folder. Name it something like chkdsk.log or Microsoft.Windows.DotNet.Framework.System.Media.Filesystem................ anything after this, Liam won't bother to look ( It's too long, Duh! )
Now hide your decoy folder. Heck, use +s.
Done! Try it. Open [your folder] and it will show the dummy file that you created, not the secret files.
Scroll down to know how to delete the undeletable. Hehe.
For advanced users
Make the decoy folder sytem, hidden and read only. Now make a hidden desktop.ini file in it and paste the following in it:
Where {Extension CLSID} is the clsid of a special folder such as recycle bin, favourites, etc.
(Google it).
Now when Liam opens the decoy, all he will see is the deleted photos of the girl.
You can go further still by denying everyone access to the decoy folder.(ACL)
DELETE THE UNDELETABLE
To access you files, simply rename the decoy to something else.
To delete the folder, use the same command, just replace md with rd.
Cheers.
References:
An article on greyhathacker.net.
There is also a post on hackforums about this, by me. NOTE : I AM NOT ADVERTISING HACKFORUMS.
Of course I will be providing ways to delete them !
Let's get started.
The thing is that explorer can't handle folders with whitespaces in the end of filenames very well. You can open them, explore them, modify it's contents, but that's it. They can't be renamed, deleted and the folder size shows 0bytes even with info inside.
But
Suppose you have a [normal] folder named "Recovery" in which you store all your files.
You want the intruder/guest/Liam to ignore those files in plain sight. What do you do?
Hide them?
He can view them still.
Use +s?
Still.
Use the shitty folder password .bat file?
It's not a joke.
Use a software?
Then why would I write this?
Here's what to do.....
Open the parent folder of the target folder in cmd (where your new folder will reside).
Write the following in the console ( replace [your folder] with the name of your folder )
Code:
md "[your folder] \"IMPORTANT
You notice that whitespace after [your folder] and before " ? That's the nuke. Make sure you copy that character, it's not a space, nor [alt]+255
Also, the forwardslash (\) is also very important.
You have now created the undeletable folder.
But wait! The folder is undeletable, not it's files, and if you've noticed, there isn't a way to hide it. At all.
So you might be wondering why I am writing this thing if you can't hide it? Keep reading.....
Put all you secret files in the new folder that you made.
Now we will make a dummy folder, a decoy so that windows thinks the girl is in that one and sends Liam to get her.

Make a new folder in the same parent directory with the same name, [your folder] but this time without the white space.
Don't get it? Go to the parent folder, right click>New>Folder, enter "[your folder]" as name and hit enter. (This time no whitespace, don't include the quotes)
Put a dummy text file in the decoy folder. Name it something like chkdsk.log or Microsoft.Windows.DotNet.Framework.System.Media.Filesystem................ anything after this, Liam won't bother to look ( It's too long, Duh! )
Now hide your decoy folder. Heck, use +s.
Done! Try it. Open [your folder] and it will show the dummy file that you created, not the secret files.
Scroll down to know how to delete the undeletable. Hehe.
For advanced users
Make the decoy folder sytem, hidden and read only. Now make a hidden desktop.ini file in it and paste the following in it:
Code:
[.ShellClassInfo]
CLSID={Extension CLSID}(Google it).
Now when Liam opens the decoy, all he will see is the deleted photos of the girl.
You can go further still by denying everyone access to the decoy folder.(ACL)
DELETE THE UNDELETABLE
To access you files, simply rename the decoy to something else.
To delete the folder, use the same command, just replace md with rd.
Code:
rd "[your folder] \"Cheers.
References:
An article on greyhathacker.net.
There is also a post on hackforums about this, by me. NOTE : I AM NOT ADVERTISING HACKFORUMS.
(This post was last modified: 02-21-2016, 12:12 PM by Wingless.)


![[+]](https://sinister.li/images/modern/collapse_collapsed.png)










![[Image: 9H83e18.png]](https://i.imgur.com/9H83e18.png)












