metasploit-framework

https://github.com/rapid7/metasploit-framework

Ruby

Metasploit Framework

Rex::Parser::NTFS#file_content_from_mft_num

Get the file from the MFT number
The size must be gived because the $FILENAME attribute
in the MFT entry does not contain it
The file is in $DATA (128) Attribute

Source | Google | Stack overflow

Edit

git clone [email protected]:rapid7/metasploit-framework.git

cd metasploit-framework

open lib/rex/parser/fs/ntfs.rb

Contribute

# Make a new branch

git checkout -b -your-name--update-docs-Rex--Parser--NTFS-file_content_from_mft_num-for-pr

# Commit to git

git add lib/rex/parser/fs/ntfs.rbgit commit -m "better docs for Rex::Parser::NTFS#file_content_from_mft_num"

# Open pull request

gem install hub # on a mac you can `brew install hub`

hub fork

git push <your name> -your-name--update-docs-Rex--Parser--NTFS-file_content_from_mft_num-for-pr

hub pull-request

# Celebrate!