linux-ext4 - Re: Restoring filenames from partly damaged ext4-filesystem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 9 Feb 2012 21:22:23 +0000 (GMT)
From:	Rudolf Zran <rudolfzran@...oo.com>
To:	Andreas Dilger <adilger@...ger.ca>
Cc:	"linux-ext4@...r.kernel.org" <linux-ext4@...r.kernel.org>,
	"debian-user@...ts.debian.org" <debian-user@...ts.debian.org>
Subject: Re: Restoring filenames from partly damaged ext4-filesystem

Hello Andreas!


[ext4 partition overwritten with garbage at the beginning]


>>  * photorec from the testdisk package recoveres, luckily!, about 500GB of
>>    data. Though the content seems to be pretty reasonable, no filenames
>>    are recovered, since photorec operates without using filesystem 
>>   knowledge.
>> 
>>  Do you see any chances (besides consulting professional recovery companies)
>>  getting the filenames back?
> 
> There was an ext3grep tool that some people had success with, but when I
> looked at it, it was still fairly complex to use.

Thanks for the hint, but the problem with ext3grep is that it seems to
rely on an intact filesystem structure. It even has no option to set
another superblock besides the default one and fails with all commands
I tried ( see https://pzt.me/8q6k ).

Bye, Rudolf.

--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html