Ethical Hacking Training at InfoSec Institute

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Computer Forensics Computer-Forensics
[Top] [All Lists]

Re: Mount a .bin file in Linux

Subject: Re: Mount a .bin file in Linux
Date: Sun, 5 Nov 2006 18:50:43 +0200 (IST)
On Wed, 1 Nov 2006 clint@robotic.com wrote:
Help! I've created a .bin file of a Windows XP system using an
X-Late HardCopy device (in image mode). I thought I could simply
mount the image in Linux (I'm using Helix 0307) using:

# mount -o loop -t iso9660 image001.bin /media/test

but that doesn't work (mount: wrong fs type, bad option, bad superblock on 
/dev/loop1, missing codepage or other error).

Any ideas how I can mount a .bin image in Helix so I can investigate
it? I can mount it in Autopsy, but I want the OS to see it.

I am not sure what is the type of the data in the image. If it is an
image of CD, then you can convert .bin+.cue to .iso and mount .iso
(if you do not have .cue you can easily create it).
Search for `bin cue iso' for more information.

If it is an image of a hard drive partition, then the file system is
not iso, so you may try mount to guess it or use some likely types.

If it is an image of whole hard drive, then you may try to mount the
image to a loop device (search for `losetup'), and inspect its
partition table with, say, cfdisk or sfdisk. Once you found offset of
the partition you want, you can put it on loop (-o offset in losetup)
and mount it.

-- 
Regards,
ASK

<Prev in Thread] Current Thread [Next in Thread>