Recovering deleted ...
 
Notifications
Clear all

Recovering deleted files - Source Code?

3 Posts
3 Users
0 Reactions
482 Views
(@forenz)
Eminent Member
Joined: 18 years ago
Posts: 47
Topic starter  

Hi i'm looking for some source code (much preferably c++ (or second best Java)) for a program that reads deleted files from disk by locating their extension in their header.

The program can be command line, i just want the bare minimum to achieve this, nothing else, GUI doesn't matter. Comments would be great, i'd just really like to understand how this is done / what API is used.
I'm by no means fluent in programming, but am interested in this and look to become good at it/ program my own forensic tools.

Thanks a lot for replies/code, i really appreciate it!


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

A quick Google search led to

http//www.digitalforensicssolutions.com/Scalpel/
http//foremost.sourceforge.net/


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Also, Testdisk
http//www.cgsecurity.org/wiki/TestDisk
includes Photorec
http//www.cgsecurity.org/wiki/PhotoRec
it is NOT only for Photos, see the list of "known" filetypes
http//www.cgsecurity.org/wiki/File_Formats_Recovered_By_PhotoRec

jaclaz


   
ReplyQuote
Share: