Packages and Binaries:

recoverjpeg

Recover JFIF (JPEG) pictures and MOV movies
recoverjpeg tries to recover JFIF (JPEG) pictures and MOV movies from a peripheral. This may be useful if you mistakenly overwrite a partition or if a device such as a digital camera memory card is bogus.

This package provides these executables: recoverjpeg, recovermov, remove-duplicates and sort-pictures. The remove-duplicates is useful to remove duplicate files found. sort-pictures can be used to sort pictures according to exif date.

This package acts as a carver (data carving) and is useful in forensics investigations.

Installed size: 65 KB
How to install: sudo apt install recoverjpeg

recoverjpeg

Recover jpeg pictures from a filesystem image

root@kali:~# recoverjpeg -h
Usage: recoverjpeg [options] file|device
Options:
   -b blocksize   Block size in bytes (default: 512)
   -d format      Directory format string in printf syntax
   -f format      File format string in printf syntax
   -h             This help message
   -i index       Initial picture index
   -m maxsize     Max jpeg file size in bytes (default: 6m)
   -o directory   Restore jpeg files into this directory
   -q             Be quiet
   -r readsize    Size of disk reads in bytes (default: 128m)
   -s cutoff      Minimal file size in bytes to restore
   -S skipsize    Size to skip at the beginning
   -v             Be verbose
   -V             Display version and exit

recovermov

Recover movies from a filesystem image

root@kali:~# recovermov -h
Usage: recovermov [options] file|device
Options:
   -b blocksize   Block size in bytes
                  (default: 512)
   -n base_name   Basename of the mov files to create
                  (default: "video_")
   -h             This help message
   -i index       Initial movie index
   -o directory   Restore mov files into this directory
   -V             Display version and exit

remove-duplicates

Remove duplicates of the same file in the current directory

root@kali:~# man remove-duplicates
REMOVE-DUPLICATES(1)                                       REMOVE-DUPLICATES(1)

NAME
     remove-duplicates  - remove duplicates of the same file in the current di-
     rectory

SYNOPSIS
     remove-duplicate [-f]

DESCRIPTION
     Removes duplicates of the same file in the  current  directory  if  -f  is
     given.   If  -f  is not given, duplicate will be identified twice (once in
     every direction).

OPTIONS
     -f

COPYRIGHT
     Copyright (c) 2004-2016 Samuel  Tardieu  [email protected].   This  is  free
     software;  see  the  source for copying conditions.  There is NO warranty;
     not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

     If recoverjpeg saves your day and you liked it, you are welcome to send me
     the best rescued ones by email (please send only 800x600 versions  of  the
     pictures)  and authorize me to put them online (indicate which contact in-
     formation you want me to use for credits).

SEE ALSO
     recoverjpeg(1) sort-pictures(1)

AUTHORS
     Samuel Tardieu [email protected]

User Manuals                   November 12, 2016           REMOVE-DUPLICATES(1)

sort-pictures

Sort pictures according to exif date

root@kali:~# man sort-pictures
SORT-PICTURES(1)                                               SORT-PICTURES(1)

NAME
     sort-pictures - sort pictures according to exif date

SYNOPSIS
     sort-pictures

DESCRIPTION
     Sort-pictures uses the exif tags in jpeg pictures recovered by recoverjpeg
     in directories.  It creates hard links to organize sorted pictures.

     Running  sort-pictures will scan the current directory for files named af-
     ter the template image?????*.jpg (image followed by at least five  charac-
     ters  followed  by .jpg).  A new hardlink will be created for each file in
     one of the following directories:

     * invalid The picture is an invalid JFIF file.

     * small The picture size is less than 100,000 bytes.

     * undated Sort-pictures was unable to determine the date  of  the  picture
       from the exif tags.

     * YYYY-MM-DD  A  directory  representing the date at which the picture was
       taken.

SEE ALSO
     recoverjpeg(1) remove-duplicates(1)

COPYRIGHT
     Copyright (c) 2004-2016 Samuel  Tardieu  [email protected].   This  is  free
     software;  see  the  source for copying conditions.  There is NO warranty;
     not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

AUTHORS
     Samuel Tardieu [email protected]

User Manuals                   November 12, 2016               SORT-PICTURES(1)