Darik's Boot And Nuke (Anti-Forensics)
Insert in:
Logo "Dragon"-> Backtrack-> Digital Forensics->Anti-Forensics
Darik's Boot and Nuke ("DBAN") is a self-contained boot disk that securely wipes the hard disks of most computers. DBAN will automatically and completely delete the contents of any hard disk that it can detect, which makes it an appropriate utility for bulk or emergency data destruction.
http://www.dban.org/
@firebitsbr
Re: Darik's Boot And Nuke (Anti-Forensics)
Thanks for requesting this, firebits.
You'll have +1 Vote on the integration of DBAN into BackTrack now. It's a must-have!
SecUpwN
Re: Darik's Boot And Nuke (Anti-Forensics)
Well I don't' see why a penetration tester would need to have such software integrated into BackTrack.
I mean the last thing one would want to do is destroy data. Generally a pentester would want trails and tracks to remain behind.
Re: Darik's Boot And Nuke (Anti-Forensics)
Quote:
Originally Posted by
Archangel-Amael
Well I don't' see why a penetration tester would need to have such software integrated into BackTrack.
I mean the last thing one would want to do is destroy data. Generally a pentester would want trails and tracks to remain behind.
I think that many people use BT not primarily on pentests but as search/rescue/forensic distro, for purposes like rescue HDD, recover files, or even wipe content from HDD, that will not be used anymore (warranty purposes, selling old company PCs, etc.). So that's why they ask for such a tool (my guess).
Re: Darik's Boot And Nuke (Anti-Forensics)
I think now would be a good time to mention HDDErase and zdnet did a decent writeup on it here: http://www.zdnet.com/blog/storage/ho...hard-drive/129
DBAN is inferior to this drive wipe method.
I personally would rather see the dev's leave dban out of the distro. For a few reasons; there are better solutions available, its not hard to burn it to its own disc and wipe drives from there, drive wipes aren't exactly forensic or pentest related, I'm pretty sure this can be done via cli with already available tools.
EDIT:
I had actually learned about HDDErase from the shmoocon '09 talk by Scott Moulton "10 Things about Hard Drives you didn't know!"
Its a good presentation and can be found in 6 parts on youtube here:
http://www.youtube.com/watch?v=fst8IZup44c