HiveBrain v1.2.0
Get Started
← Back to all entries
snippetbashTip

ntfs-read.py — A read-only NTFS explorer for accessing and extracting files from NTFS volumes. Part of the Impacket

Submitted by: @import:tldr-pages··
0
Viewed 0 times
clitldrntfs-read.pycommand-line
commandntfs-read.pyreadcliexploreronlyforntfs

Problem

How to use the ntfs-read.py command: A read-only NTFS explorer for accessing and extracting files from NTFS volumes. Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Solution

ntfs-read.py — A read-only NTFS explorer for accessing and extracting files from NTFS volumes. Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Open an NTFS volume for exploration (e.g., C:\.\\ or /dev/disk1s1):
ntfs-read.py {{volume}}


Extract a specific file from an NTFS volume (e.g., \windows\system32\config\sam):
ntfs-read.py -extract {{\windows\system32\config\sam}} {{volume}}


Enable debug output:
ntfs-read.py -debug {{volume}}


Display help:
ntfs-read.py --help

Code Snippets

Open an NTFS volume for exploration (e.g., `C:\.\\` or `/dev/disk1s1`)

ntfs-read.py {{volume}}

Extract a specific file from an NTFS volume (e.g., `\windows\system32\config\sam`)

ntfs-read.py -extract {{\windows\system32\config\sam}} {{volume}}

Enable debug output

ntfs-read.py -debug {{volume}}

Display help

ntfs-read.py --help

Context

tldr-pages: common/ntfs-read.py

Revisions (0)

No revisions yet.