foremost 隐藏文件分离工具

用于分离出文件中隐藏的文件，可用 @echo off cd D:\OtherApp\CTFTool\foremost -->这行需要你换成你的安装目录，即foremost.exe所在目录 set path=%~dp1 start foremost -i %1 -o %path%\outfile echo foremost解密成功 pause 来自动分离。

/*
	Modified API from http://chicago.sourceforge.net/devel/docs/ole/
	Basically the same API added error checking and the ability
	to check buffers for docs not just files.
*/
#include “main.h“
#include “ole.h“

/*Some ugly globals
* This API should be re-written
* in a modular fashion*/
unsigned char	buffer[OUR_BLK_SIZE];
char			*extract_name;
int				extract = 0;
int				dir_count = 0;
int				*FAT;
int				verbose = TRUE;
int				FATblk;
int				currFATblk;
int				highblk = 0;
int				block_list[OUR_BLK_SIZE / sizeof（int）];

/*Inititialize those globals used by extract_ole*/
void init_ole（）
{
	int i = 0;
	extract = 0;
	dir_count = 0;
	FAT = NULL;
	highblk = 0;
	FATblk = 0;
	currFATblk = -1;
	dirlist = NULL;
	dl = NULL;
	for （i = 0; i < OUR_BLK_SIZE / sizeof（int）; i++）
		{
		block_list[i] = 0

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----
     目录           0  2016-02-05 03:13  foremost-master\
     文件         117  2016-02-05 03:13  foremost-master\.gitignore
     文件        7386  2016-02-05 03:13  foremost-master\CHANGES
     文件        5216  2016-02-05 03:13  foremost-master\Makefile
     文件        4877  2016-02-05 03:13  foremost-master\README
     文件       13910  2016-02-05 03:13  foremost-master\api.c
     目录           0  2016-02-05 03:13  foremost-master\binary\
     文件       70097  2016-02-05 03:13  foremost-master\binary\foremost-linux
     文件       62912  2016-02-05 03:13  foremost-master\binary\foremost-mac
     文件        9141  2016-02-05 03:13  foremost-master\binary\foremost.conf
     文件       90112  2016-02-05 03:13  foremost-master\binary\foremost.exe
     文件         510  2016-02-05 03:13  foremost-master\cli.c
     文件        6907  2016-02-05 03:13  foremost-master\config.c
     文件        9107  2016-02-05 03:13  foremost-master\dir.c
     文件       16300  2016-02-05 03:13  foremost-master\engine.c
     文件       63371  2016-02-05 03:13  foremost-master\extract.c
     文件        4098  2016-02-05 03:13  foremost-master\extract.h
     文件        3551  2016-02-05 03:13  foremost-master\foremost.8.gz
     文件        9141  2016-02-05 03:13  foremost-master\foremost.conf
     文件       12100  2016-02-05 03:13  foremost-master\helpers.c
     目录           0  2016-02-05 03:13  foremost-master\library\
     文件     1079376  2016-02-05 03:13  foremost-master\library\libiberty.a
     文件        6909  2016-02-05 03:13  foremost-master\main.c
     文件       12562  2016-02-05 03:13  foremost-master\main.h
     文件        3106  2016-02-05 03:13  foremost-master\ole.h
     文件       17802  2016-02-05 03:13  foremost-master\state.c