SkillAgentSearch skills...

DumpReparsePoints

This is a simple tool to dump all the reparse points on an NTFS volume.

Install / Use

/learn @tyranid/DumpReparsePoints
About this skill

Quality Score

0/100

Supported Platforms

Universal

README

DumpReparsePoints

This is a simple tool to dump all the reparse points on an NTFS volume.

It uses the \\$Extend\\$Reparse directory which can then be queried using NtQueryDirectoryFile and the FileReparsePointInformation info class to enumerate all reparse points on the volume without actually recursively interating through all files and directories. You need to run this tool as an Administrator.

Some filter drivers will actively remove their reparse tags so it's possible that not everything will be visible but it'll identity standard tags such as MOUNT_POINT and SYMLINK.

View on GitHub
GitHub Stars33
CategoryDevelopment
Updated1y ago
Forks7

Languages

C#

Security Score

75/100

Audited on Mar 4, 2025

No findings