Skip to content

Instantly share code, notes, and snippets.

@jwshields

jwshields/ntfstool gpt Secret

Last active January 18, 2024 04:14
Show Gist options
  • Save jwshields/403d5b01e430108bd289bf8947325c89 to your computer and use it in GitHub Desktop.
Save jwshields/403d5b01e430108bd289bf8947325c89 to your computer and use it in GitHub Desktop.
Download ZIP
ntfstool output
Raw
ntfstool gpt
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe gpt disk=1 volume=2
GPT from \\.\PhysicalDrive1
---------------------------
Signature : EFI PART
Revision : 1.0
Header Size : 92
Header CRC32 : 09fbf176
Reserved : 00000000
Current LBA : 1
Backup LBA : 39063650303
First Usable LBA : 34
Last Usable LBA : 39063650270
GUID : {ff44c154-e85f-46fb-b465-1f7ed316e565}
Entry LBA : 2
Entries Num : 128
Entries Size : 128
Partitions CRC32 : daa5d099
Partition table : 2 entries
+----------------------------------------------------------------------------------------------------------------------------+
| Id | Name | GUID | First sector | Last sector | Flags |
+----------------------------------------------------------------------------------------------------------------------------+
| 1 | Microsoft reserved partition | {372bd09e-3433-42f2-b405-ccecbe31eae2} | 34 | 32767 | 0000000000000000 |
| 2 | Basic data partition | {d921f5a8-05b1-4555-89d4-ef2b34e1f0ac} | 32768 | 39063646207 | 0000000000000000 |
+----------------------------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe gpt disk=9 volume=2
GPT from \\.\PhysicalDrive9
---------------------------
Signature : EFI PART
Revision : 1.0
Header Size : 92
Header CRC32 : 18c116c8
Reserved : 00000000
Current LBA : 1
Backup LBA : 7814037167
First Usable LBA : 34
Last Usable LBA : 7814037134
GUID : {5bb03b67-273f-4417-b7dc-dc3ff9a2730a}
Entry LBA : 2
Entries Num : 128
Entries Size : 128
Partitions CRC32 : 57be5cc6
Partition table : 2 entries
+----------------------------------------------------------------------------------------------------------------------------+
| Id | Name | GUID | First sector | Last sector | Flags |
+----------------------------------------------------------------------------------------------------------------------------+
| 1 | Microsoft reserved partition | {bc8d02b6-9931-4275-b980-23e6708fcae7} | 34 | 32767 | 0000000000000000 |
| 2 | Basic data partition | {ebbd3c0e-cbce-4bb4-ae44-41726dec441b} | 32768 | 7814033407 | 0000000000000000 |
+----------------------------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe gpt disk=6 volume=2
[!] Invalid or non-GPT partition table
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe gpt disk=8 volume=2
[!] Invalid or non-GPT partition table
Raw
ntfstool info
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info
Disks:
------
+------------------------------------------------------------------------------------------+
| Id | Model | Type | Partition | Size |
+------------------------------------------------------------------------------------------+
| 0 | ST8000NM0055-1RM112 | Fixed HDD | GPT | 8001563222016 (7.28 TiBs) |
| 1 | WDC WD201KFGX-68BKJN0 | Fixed HDD | GPT | 20000588955648 (18.19 TiBs) |
| 2 | ST4000VN008-2DR166 | Fixed HDD | GPT | 4000787030016 (3.64 TiBs) |
| 3 | Samsung SSD 850 EVO 500GB | Fixed SSD | GPT | 500107862016 (465.76 GiBs) |
| 4 | ST8000NM0055-1RM112 | Fixed HDD | GPT | 8001563222016 (7.28 TiBs) |
| 5 | ST4000VN008-2DR166 | Fixed HDD | GPT | 4000787030016 (3.64 TiBs) |
| 6 | ST18000NM003J-2TV102 | Fixed HDD | GPT | 18000207937536 (16.37 TiBs) |
| 7 | ST4000DM000-1F2168 | Fixed HDD | GPT | 4000787030016 (3.64 TiBs) |
| 8 | ST18000NM003J-2TV102 | Fixed HDD | GPT | 18000207937536 (16.37 TiBs) |
| 9 | PNY CS900 4TB SSD | Fixed SSD | GPT | 4000787030016 (3.64 TiBs) |
| 10 | Samsung SSD 980 1TB | Fixed SSD | GPT | 1000204886016 (931.51 GiBs) |
| 11 | Samsung SSD 960 EVO 500GB | Fixed SSD | GPT | 500107862016 (465.76 GiBs) |
| 12 | Samsung SSD 960 EVO 500GB | Fixed SSD | GPT | 500107862016 (465.76 GiBs) |
| 13 | Virtual Disk | Fixed SSD | MBR | 8589934592 (8.00 GiBs) |
| 14 | Virtual Disk | Fixed SSD | GPT | 8388608 (8.00 MiBs) |
| 15 | Data Drive 2.0 | Removable HDD | MBR | 4026531840 (3.75 GiBs) |
+------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=1
Info for disk: \\.\PhysicalDrive1
---------------------------------
Model : WDC WD201KFGX-68BKJN0
Version : 83.00A83
Serial : [REDACTED]
Media Type : Fixed HDD
Size : 20000588955648 (18.19 TiBs)
Geometry : 512 bytes * 63 sectors * 255 tracks * 2431599 cylinders
Partition : GPT
+-----------------------------------------------------------------------------------------------------------+
| Id | Type | Label | Mounted | Filesystem | Offset | Size |
+-----------------------------------------------------------------------------------------------------------+
| 2 | Basic Data | 20T-WD-REDPRO | N:\ | NTFS | 0000000001000000 | 00001230bee00000 (18.19 TiBs) |
+-----------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=1 volume=2
Info for \\.\PhysicalDrive1 > Volume:2
--------------------------------------
Serial Number : [REDACTED]
Filesystem : NTFS
GUID : Basic Data
Type : Fixed
Label : 20T-WD-REDPRO
Offset : 16777216 (16.00 MiBs)
Size : 20000570081280 (18.19 TiBs)
Free : 20000140984320 (18.19 TiBs)
Mounted : True (N:\)
Bitlocker : False
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=6
Info for disk: \\.\PhysicalDrive6
---------------------------------
Model : ST18000NM003J-2TV102
Version : NZ01
Serial : [REDACTED]
Media Type : Fixed HDD
Size : 18000207937536 (16.37 TiBs)
Geometry : 4096 bytes * 63 sectors * 255 tracks * 273550 cylinders
Partition : GPT
+-----------------------------------------------------------------------------------------------------------+
| Id | Type | Label | Mounted | Filesystem | Offset | Size |
+-----------------------------------------------------------------------------------------------------------+
| 2 | Basic Data | 18T-INT-X18-1 | O:\ | Unknown | 0000000001000000 | 0000105efee00000 (16.37 TiBs) |
+-----------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=6 volume=2
Info for \\.\PhysicalDrive6 > Volume:2
--------------------------------------
Serial Number : [REDACTED]
Filesystem : Unknown
GUID : Basic Data
Type : Fixed
Label : 18T-INT-X18-1
Offset : 16777216 (16.00 MiBs)
Size : 18000189063168 (16.37 TiBs)
Free : 3684496760832 (3.35 TiBs)
Mounted : True (O:\)
Bitlocker : False
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=8
Info for disk: \\.\PhysicalDrive8
---------------------------------
Model : ST18000NM003J-2TV102
Version : NZ01
Serial : [REDACTED]
Media Type : Fixed HDD
Size : 18000207937536 (16.37 TiBs)
Geometry : 4096 bytes * 63 sectors * 255 tracks * 273550 cylinders
Partition : GPT
+-------------------------------------------------------------------------------------------------------+
| Id | Type | Label | Mounted | Filesystem | Offset | Size |
+-------------------------------------------------------------------------------------------------------+
| 2 | Basic Data | 18T-X18-2 | P:\ | Unknown | 0000000001000000 | 0000105efee00000 (16.37 TiBs) |
+-------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=8 volume=2
Info for \\.\PhysicalDrive8 > Volume:2
--------------------------------------
Serial Number : [REDACTED]
Filesystem : Unknown
GUID : Basic Data
Type : Fixed
Label : 18T-X18-2
Offset : 16777216 (16.00 MiBs)
Size : 18000189063168 (16.37 TiBs)
Free : 17999805464576 (16.37 TiBs)
Mounted : True (P:\)
Bitlocker : False
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=9
Info for disk: \\.\PhysicalDrive9
---------------------------------
Model : PNY CS900 4TB SSD
Version : CS900600
Serial : [REDACTED]
Media Type : Fixed SSD
Size : 4000787030016 (3.64 TiBs)
Geometry : 512 bytes * 63 sectors * 255 tracks * 486401 cylinders
Partition : GPT
+---------------------------------------------------------------------------------------------------------+
| Id | Type | Label | Mounted | Filesystem | Offset | Size |
+---------------------------------------------------------------------------------------------------------+
| 2 | Basic Data | 4T-PNY-CS900 | M:\ | NTFS | 0000000001000000 | 000003a380600000 (3.64 TiBs) |
+---------------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=9 volume=2
Info for \\.\PhysicalDrive9 > Volume:2
--------------------------------------
Serial Number : [REDACTED]
Filesystem : NTFS
GUID : Basic Data
Type : Fixed
Label : 4T-PNY-CS900
Offset : 16777216 (16.00 MiBs)
Size : 4000768327680 (3.64 TiBs)
Free : 3797432340480 (3.45 TiBs)
Mounted : True (M:\)
Bitlocker : False
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=10
Info for disk: \\.\PhysicalDrive10
----------------------------------
Model : Samsung SSD 980 1TB
Version : 1B4QFXO7
Serial : [REDACTED]
Media Type : Fixed SSD
Size : 1000204886016 (931.51 GiBs)
Geometry : 512 bytes * 63 sectors * 255 tracks * 121601 cylinders
Partition : GPT
+----------------------------------------------------------------------------------------------------+
| Id | Type | Label | Mounted | Filesystem | Offset | Size |
+----------------------------------------------------------------------------------------------------+
| 1 | EFI System | | | FAT32 | 0000000000100000 | 0000000006400000 (100.00 MiBs) |
| 3 | Basic Data | | C:\ | NTFS | 0000000007500000 | 000000e8b9951a00 (930.90 GiBs) |
| 4 | WinRE | | | NTFS | 000000e8c0f00000 | 000000001fd00000 (509.00 MiBs) |
+----------------------------------------------------------------------------------------------------+
PS C:\Users\noodle\Downloads> .\ntfstool.x64.exe info disk=10 volume=3
Info for \\.\PhysicalDrive10 > Volume:3
---------------------------------------
Serial Number : [REDACTED]
Filesystem : NTFS
GUID : Basic Data
Type : Fixed
Offset : 122683392 (117.00 MiBs)
Size : 999545969152 (930.90 GiBs)
Free : 93889949696 (87.44 GiBs)
Mounted : True (C:\)
Bitlocker : False
PS C:\Users\noodle\Downloads>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment