Author Topic: Should I go to kali linux to practice hacking a windows hard drive  (Read 584 times)

Gattopardo

  • Lord of the sith
  • Overseaing the building of the death star
Looking to remove all the bits of a win 10 updated from win 8 hard drive.  Don't want to clone the drive, just reinstall os on a new ssd as win11 doesn't let me view the files.

Is there a better linus to do this with?

Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #1 on: 19 April, 2024, 01:39:31 am »
If you are doing a new install you don't need to delete any files. The installer will give you the option to delete partitions when choosing where to install, simply delete all the existing partions. Once the installer has created new partions none of the old files will be visible. Technically some of the data is still recoverable (by reading the raw device), but in normal use it has gone.

If you really want to delete stuff on an SSD then "secure erase" is probably the way to go. Booting into the UEFI BIOS may well provide a "secure erase" function. You only need this if you have some security reason for erasing the data, simply deleting the partions is likely to be sufficient in most cases.

Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #2 on: 19 April, 2024, 06:40:57 am »
Your aim is not clear. If you wish to read some files from a hard drive, simply boot into a live ISO of your choice, from USB.
Knoppix was the canonical choice in past times. (forgive the unintended pun)

Gattopardo

  • Lord of the sith
  • Overseaing the building of the death star
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #3 on: 19 April, 2024, 04:50:28 pm »
Looking for a linux that is easy to use and not haveing to do any command window stuff.

The drive in question doesn't work in the laptop, but works in a caddy.  Tried on a win laptop and could not view the files so was looking to install a new drive in  the other machine. Then transfer the files via the linux laptop.


Feanor

  • It's mostly downhill from here.
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #4 on: 19 April, 2024, 05:38:36 pm »
If you are trying to recover files from an unreadable drive, than I'm not sure adding a Linux machine to the mix is going to help much.

If you install a fresh Win11 on a new SSD, then go ahead and do that.

Not sure what you mean when you say it 'doesn't work in the laptop but works in the caddy'.
You might need to explain exactly what you mean by that.

If it works in the caddy, then just plug the caddy into the freshly-installed machine as a secondary drive, and copy the files over?

Kim

  • Timelord
    • Fediverse
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #5 on: 19 April, 2024, 06:14:17 pm »
Doesn't Kali Linux make you a dangerous h4xx0r?  You might as well wear a hoodie and light your room with a projector showing meaningless binary.

https://www.theregister.com/2020/02/14/silly_police_infosec_parental_advice_poster/

Morat

  • I tried to HTFU but something went ping :(
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #6 on: 20 April, 2024, 11:52:17 am »
Doesn't Kali Linux make you a dangerous h4xx0r?  You might as well wear a hoodie and light your room with a projector showing meaningless binary.

https://www.theregister.com/2020/02/14/silly_police_infosec_parental_advice_poster/

But you're only doing HAX if you've actually pulled the hood up like Mr Robot
Everyone's favourite windbreak

Gattopardo

  • Lord of the sith
  • Overseaing the building of the death star
If you are trying to recover files from an unreadable drive, than I'm not sure adding a Linux machine to the mix is going to help much.

If you install a fresh Win11 on a new SSD, then go ahead and do that.

Not sure what you mean when you say it 'doesn't work in the laptop but works in the caddy'.
You might need to explain exactly what you mean by that.

If it works in the caddy, then just plug the caddy into the freshly-installed machine as a secondary drive, and copy the files over?

The laptop doesn't boot with the drive in the laptop.  Not sure that the laptop is damaged beyond repair. The drive can be seen in a reader  just I can't access the files as windows says I don't have admin access.


Trying to help the ex.

Feanor

  • It's mostly downhill from here.
The laptop doesn't boot with the drive in the laptop.  Not sure that the laptop is damaged beyond repair. The drive can be seen in a reader  just I can't access the files as windows says I don't have admin access.

This is normal and to be expected.
It's an ownership / permissions issue, by design.

Basically, you need to do something called 'Take Ownership' of the files.

In Windows, all files have an Owner - typically the user who created them.
The actual system files will be owned by one of the System user accounts, not an end-user account.

But the User's files ( ie the files in the User's Profile eg C:\Users\Feanor ) will have That User, the creator, as the Owner.
Then permissions are set such that another end-user has no permissions to read them.
This means that if multiple different people have user accounts on the same machine, they only have access to their own User Profie.
They will get Access Denied if they try to look at the files in someone else's User Profile.

And this is what's happening here.
The User Account on the working machine is not the same User Account as the one on the broken laptop which is the creator and Owner of these files.
So when logged into the working laptop, your User Account has no permissions to read the User Profile on the old drive which belongs to a different User.

However, as an Admin on the working host machine, you *can* force matters by changing the Owner of the User Profile folder and all sub-folders and files on the problem drive.
It's been a long time since I've had to do this myself, but the steps are something like this:

-Start Windows Explorer and browse to the problem User Profile folder,
-R-click the folder and select Properties;
-Security tab > Advanced button;
-Owner is listed at the top (It will probably not be a name, just a long number); click 'Change' link next to it.
-Click 'Object Types' button, and leave only 'Users' selected;
-Click 'Advanced' button, then 'Find Now';
-Select the User you are logged in as and who you want to Own these files now;
-OK your way back out of these windows till you get back to the main Security window,
-Check the option 'Replace all child object permissions...' (so it applies to all the sub-folders and files too);
-And then finally 'OK'.  It may take a few moments to grind it's way through all the files.

Now as I said, I've not done this for a long time.
I just went through the steps here, but didn't hit the final OK!
It might be that modern Windows will have a bit of a hissy at this point and need you to stand on your head a bit more, but that's the basic steps.



Modifying a suspect damaged drive is a bad idea. There are a couple of suggestions here using either an add on driver or Mac or Linux to read the drive while ignoring permissions:

https://superuser.com/questions/144101/windows-7-ignore-security-when-reading-external-drive

quixoticgeek

  • Mostly Harmless
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #10 on: Yesterday at 12:25:48 pm »

If the question is should you use Kali, the answer is "if you need to ask, the answer is no"

Kali is a highly specialised distro, and not for the newbie.

J
--
Beer, bikes, and backpacking
http://b.42q.eu/

Kim

  • Timelord
    • Fediverse
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #11 on: Yesterday at 08:56:02 pm »
Yes.  My general advice for choosing Linux distros is either:

a) The one you're already familiar with.

Unless either:

b) You're not familiar with any of them, then Ubuntu, because any problem you have will likely be easily googleable (some of which may even have solutions).

or:

c) Packages for the specific thing you want to do are conspicuously absent from from a) or b) because reasons.


Anyone with more complicated edge cases isn't likely to be asking the question.

Gattopardo

  • Lord of the sith
  • Overseaing the building of the death star
Re: Should I go to kali linux to practice hacking a windows hard drive
« Reply #12 on: Yesterday at 10:43:38 pm »
Thank you all for the advice.

The lapto is a lenovo g580, the battery does not hold charge and the power lead is damaged so only holps charge in certain positions of the cable.  The cmos battery has been knocked of the motherboard and suspect other issues as the computer works sporadicaly.

Ended up using kali on a usb drive on another low powered machine, with two media readers holding sata drive and moving all the one users data to the fresh drive.