NTFSCAT(8) System Manager's Manual NTFSCAT(8)
ntfscat - concatenate files and print them on the standard output
ntfscat [ options ] device file
ntfscat will read a file from an NTFS volume and display the contents
on the standard output.
The case of the filename passed to ntfscat is ignored.
Below is a summary of all the options that ntfscat accepts. All
options have two equivalent names. The short name is preceded by - and
the long name is preceded by --. Any single letter options, that don't
take an argument, can be combined into a single command, e.g. -fv is
equivalent to -f -v. Long named options can be abbreviated to any
unique prefix of their name.
This will override some sensible defaults, such as not working
with a mounted volume. Use this option with caution.
--help Show a list of options with a brief description of each one.
Suppress some debug/warning/error messages.
Show the version number, copyright and license ntfscat.
Display more debug/warning/error messages.
Display the contents of a file in the root of an NTFS volume.
ntfscat /dev/hda1 boot.ini
Display the contents of a file in a subdirectory of an NTFS volume.
ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts
ntfscat was written in a short time, to get something "out there". It
needs a lot more work. If you find any bugs, please send an email to
ntfscat was written by Richard Russon (FlatCap)
ntfscat is part of the ntfsprogs package and is available from
ntfsprogs version 1.9.4 October 2003 NTFSCAT(8)