dissect.target icon indicating copy to clipboard operation
dissect.target copied to clipboard

Target-mount does not work with WinFSP

Open iverberk opened this issue 1 month ago • 1 comments

When trying to mount an image on Windows 11 with target-mount, it seems to startup without issues:

PS C:\Users\xyz\Downloads> target-mount -o uid=-1 -v .\Lab1_Case.E01 tmp
INFO:root:Using fuse2 library: C:\Program Files (x86)\WinFsp\bin\winfsp-x64.dll
INFO:dissect.target.target:<Target Lab1_Case.E01>: Found compatible OS plugin: WindowsPlugin
WARNING:dissect.target.tools.mount:Using option 'allow_other' by default, please use '-o allow_other=False' to unset
INFO:dissect.target.tools.mount:Mounting to tmp with options: uid=-1,nothreads,ro,allow_other
The service python has been started.

However, when trying to list the files/directories in the 'tmp' mount folder it always gives an error about insufficient permissions. It does not matter which user is being used: current user, administrator or even NT System. Permission do not seem wrong (every check is there) but somehow Windows always denies access.

I'm working on a Windows 11 system with Dissect 3.23.1 (from target-query --version output) and Python 3.13.9. Running commands like target-info, target-shell, etc. work fine on the image.

I'm using this test file: https://drive.google.com/file/d/1LBtvjKn2IlDg4PjlBOc4rlkLzQpoXZYI/view?pli=1

Is mount on Windows with WinFSP supposed to work correctly and what can I check to find out what the problem is?

iverberk avatar Nov 13 '25 09:11 iverberk

Hi @iverberk, unfortunately we don't currently test against WinFSP so it's not necessarily expected to work correctly, although that would be nice of course!

We can use this issue to track adding support for WinFSP.

Schamper avatar Nov 20 '25 14:11 Schamper