From 37316b373647c714756ee1a08b50984b9b72f4be Mon Sep 17 00:00:00 2001 From: PrincessPi3 Date: Tue, 19 Aug 2025 13:58:01 -0600 Subject: [PATCH] initial commit via gitinitshit --- Linux/README.md | 1 + README.md | 73 +++++++++++++++++++++++++++++++++++++++++++++++ Windows/README.md | 1 + 3 files changed, 75 insertions(+) create mode 100644 Linux/README.md create mode 100644 README.md create mode 100644 Windows/README.md diff --git a/Linux/README.md b/Linux/README.md new file mode 100644 index 0000000..00d7bdd --- /dev/null +++ b/Linux/README.md @@ -0,0 +1 @@ +WIP diff --git a/README.md b/README.md new file mode 100644 index 0000000..2a6e41d --- /dev/null +++ b/README.md @@ -0,0 +1,73 @@ +# Adventures in Antiforensics +# WIP +## Platform Independant Methods +### Data Destruction +#### Shredding +* HDD vs SSD + * Overwrite settings + * SSD lifespan + * HDD difficulty + * Zeroing + * Free space shredding + * Limitations + * File tips + * Vendor-specific data destruction + * bad sector remnants +#### Encrypted Data Nuking +* Encrypt data and to destory, shred the encryption headers and shutdown +### Encryption +* Unencrypted data leaks + * Out of band data leaks + * Backup leaks + * Cloud leaks +#### Key Management +* Key creation + * Passphrases + * Password managers + * Where they are ok + * Where they are not + * Creating a passphrase manually + * physical paper + * +mind + * Weaknesses + * Third Party + * KDF or Hashing algo + * Breached passwords + * Guessable passwords +* Key defence + * Key Durability + * Key protection + * Key leaks +#### Whole disk +* Robustness of crypto + * Investigate + * window + * linux +* virtual machines +* NO BITLOCKER + * NO BITLOCKER UPLOAD TO M$ JESUS FUCK +* Tooling + * shred encryption headers of disk and force shutdown + * force fork to background, clear, and exit + * linux + * something like `alias FORCEMETHEFUCKOFF='(setsid sudo bash /bin/KILLITWITHFIRE.sh && sudo shutdown now &); clear; exit'` + * where KILLITWITHFIRE.sh shreds the disks encryption headers with shred +#### Specific Data +* Unencrypted data leaks +* Unencrypted remnants +#### Symmetric +#### Assymetric +### Internet Anonymity +#### Tor +* Settings + * Relays + * Tor browser + * Hardware identifiers + * Other leaks +* Internal to the os (bad) + * [pniux](https://blog.torproject.org/introducing-oniux-tor-isolation-using-linux-namespaces/) +* physical external to device (much better) for per-request tor hopping on a specific command/operation + * openwrt? + * kill switch + * sanity checks +#### Opsec \ No newline at end of file diff --git a/Windows/README.md b/Windows/README.md new file mode 100644 index 0000000..00d7bdd --- /dev/null +++ b/Windows/README.md @@ -0,0 +1 @@ +WIP