You want to hide a secret.txt document inside c:\windows\system32\tcpip.dll kernel library using
ADS streams. How will you accomplish this?
A.
copy secret.txt c:\windows\system32\tcpip.dll kernel>secret.txt
B.
copy secret.txt c:\windows\system32\tcpip.dll:secret.txt
C.
copy secret.txt c:\windows\system32\tcpip.dll |secret.txt
D.
copy secret.txt >< c:\windows\system32\tcpip.dll kernel secret.txt
B is the Ans.
Ans: B
Careful not to mix these two up.
type (‘>’) vs copy (‘:’)
type C:\windows\system32\notepad.exe > c:\windows\system32\calc.exe:notepad.ex