FAT Volume Label Test #1 (Brian Carrier)


CTFs & Images

Test Images
This test image is a FAT file system that has been modified using a hex editor. The modifications were made to determine how tools deal with images that have abnormal volume labels. I have found that the consistency checking under Windows XP allows several scenarios that, according to the FAT specification, should not be allowed. This test image has some of those illegal situations and contains hidden data.