{"id":3539,"date":"2022-12-20T17:08:57","date_gmt":"2022-12-20T20:08:57","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/ntfscat-man8\/"},"modified":"2022-12-20T17:08:57","modified_gmt":"2022-12-20T20:08:57","slug":"ntfscat-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/ntfscat-man8\/","title":{"rendered":"NTFSCAT (man8)"},"content":{"rendered":"

NTFSCAT<\/h1>\n

NAME<\/a>
SYNOPSIS<\/a>
DESCRIPTION<\/a>
OPTIONS<\/a>
EXAMPLES<\/a>
BUGS<\/a>
AUTHORS<\/a>
AVAILABILITY<\/a>
SEE ALSO<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

ntfscat \u2212 print NTFS files and streams on the standard output<\/p>\n

SYNOPSIS <\/a> <\/h2>\n

[options<\/i>] device<\/i> [file<\/i>]<\/p>\n

DESCRIPTION <\/a> <\/h2>\n

ntfscat<\/b> will read a file or stream from an NTFS volume and display the contents on the standard output.<\/p>\n

The case of the filename passed to ntfscat<\/b> is ignored.<\/p>\n

OPTIONS <\/a> <\/h2>\n

Below is a summary of all the options that ntfscat<\/b> accepts. Nearly all options have two equivalent names. The short name is preceded by \u2212<\/b> and the long name is preceded by \u2212\u2212<\/b>. Any single letter options, that don\u2019t take an argument, can be combined into a single command, e.g. \u2212fv<\/b> is equivalent to \u2212f \u2212v<\/b>. Long named options can be abbreviated to any unique prefix of their name.
\u2212a<\/b>, \u2212\u2212attribute<\/b> TYPE<\/p>\n

Display the contents of a particular attribute type. By default, the unnamed $DATA attribute will be shown. The attribute can be specified by a number in decimal or hexadecimal, or by name.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
<\/td>\n<\/td>\n <\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n <\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n <\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\n<\/td>\n <\/td>\n<\/tr>\n<\/table>\n

\"Image<\/p>\n

Notes<\/b> The attribute names may be given without the leading $ symbol.
If you use the $ symbol, you must quote the name to prevent the shell interpreting the name.<\/p>\n

\u2212n<\/b>, \u2212\u2212attribute\u2212name<\/b> NAME<\/p>\n

Display this named attribute, stream.<\/p>\n

\u2212i<\/b>, \u2212\u2212inode<\/b> NUM<\/p>\n

Specify a file by its inode number instead of its name.<\/p>\n

\u2212f<\/b>, \u2212\u2212force<\/b><\/p>\n

This will override some sensible defaults, such as not using a mounted volume. Use this option with caution.<\/p>\n

\u2212h<\/b>, \u2212\u2212help<\/b><\/p>\n

Show a list of options with a brief description of each one.<\/p>\n

\u2212q<\/b>, \u2212\u2212quiet<\/b><\/p>\n

Suppress some debug\/warning\/error messages.<\/p>\n

\u2212V<\/b>, \u2212\u2212version<\/b><\/p>\n

Show the version number, copyright and license ntfscat<\/b>.<\/p>\n

\u2212v<\/b>, \u2212\u2212verbose<\/b><\/p>\n

Display more debug\/warning\/error messages.<\/p>\n

EXAMPLES <\/a> <\/h2>\n

Display the contents of a file in the root of an NTFS volume.<\/p>\n

ntfscat \/dev\/hda1 boot.ini<\/b><\/p>\n

Display the contents of a file in a subdirectory of an NTFS volume.<\/p>\n

ntfscat \/dev\/hda1 \/winnt\/system32\/drivers\/etc\/hosts<\/b><\/p>\n

Display the contents of the $INDEX_ROOT attribute of the root directory (inode 5).<\/p>\n

ntfscat \/dev\/hda1 \u2212a INDEX_ROOT \u2212i 5 | hexdump \u2212C<\/b><\/p>\n

BUGS <\/a> <\/h2>\n

There are no known problems with ntfscat<\/b>. If you find a bug please send an email describing the problem to the development team:
ntfs\u22123g\u2212devel@lists.sf.net<\/p>\n

AUTHORS <\/a> <\/h2>\n

ntfscat<\/b> was written by Richard Russon, Anton Altaparmakov and Szabolcs Szakacsits. It was ported to ntfs-3g by Erik Larsson.<\/p>\n

AVAILABILITY <\/a> <\/h2>\n

ntfscat<\/b> is part of the ntfs-3g<\/b> package and is available from:
http:\/\/www.tuxera.com\/community\/<\/p>\n

SEE ALSO <\/a> <\/h2>\n

Read libntfs<\/b>(8) for details how to access encrypted files.<\/p>\n

libntfs<\/b>(8), ntfsls<\/b>(8), ntfsprogs<\/b>(8)<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

ntfscat \u2212 print NTFS files and streams on the standard output <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,4,659],"class_list":["post-3539","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-man8","tag-ntfscat"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3539"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3539\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}