Categories

Category cover

Automation
32 posts

Category cover


19 posts

Category cover

Security
18 posts

Category cover

Personal Security
13 posts

Category cover

Infrastructure
10 posts

Category cover

CISO
8 posts

Category cover

OT/ICS
5 posts

Category cover

UNetLab
3 posts

Category cover

Write-up
3 posts

Category cover

OSInt
2 posts

Recover deleted photos with Kali Linux and TestDisk

Andrea Dainese
August 13, 2022
Post cover

A few days ago, my daughter has deleted by mistake some photos on her camera. It has been 10 years at least since I recovered deleted files last time, so I had to find out how to approach the problem in 2022 with Kali Linux.

I found TestDisk , available on Kali Linux and it recovered my photos without any issues.

Here is the procedure I followed:

  1. Connect the USB storage.
  2. Identify the disk, the partition type (DOS or GPT), and the partition with parted -l,
  3. Run testdisk.
  4. Click on Create a new log file.
  5. Highlight the USB disk.
  6. Click on Proceed.
  7. Click on the right partition type (in my case Intel/PC partition).
  8. Click on Advanced Filesystem Utils.
  9. Highlight the partition.
  10. Click on Undelete.
  11. Select files and directories to be recovered by pressing :.
  12. Press C to copy selected files and directories.
  13. Select the destination folder and press again C to start the recovery process.

In the end, we’ll find all files and directories under the destination path we chose.

My scenario was very simple, but you would try PhotoRec also.

References

References