Packages and Binaries:

recoverjpeg

recoverjpeg tries to recover JFIF (JPEG) pictures and MOV movies from a peripheral. This may be useful if you mistakenly overwrite a partition or if a device such as a digital camera memory card is bogus.

This package provides these executables: recoverjpeg, recovermov, remove-duplicates and sort-pictures. The remove-duplicates is useful to remove duplicate files found. sort-pictures can be used to sort pictures according to exif date.

This package acts as a carver (data carving) and is useful in forensics investigations.

Installed size: 70 KB
How to install: sudo apt install recoverjpeg

recoverjpeg

Recover jpeg pictures from a filesystem image

root@kali:~# recoverjpeg -h
Usage: recoverjpeg [options] file|device
Options:
   -b blocksize   Block size in bytes (default: 512)
   -d format      Directory format string in printf syntax
   -f format      File format string in printf syntax
   -h             This help message
   -i index       Initial picture index
   -m maxsize     Max jpeg file size in bytes (default: 6m)
   -o directory   Restore jpeg files into this directory
   -q             Be quiet
   -r readsize    Size of disk reads in bytes (default: 128m)
   -s cutoff      Minimal file size in bytes to restore
   -S skipsize    Size to skip at the beginning
   -v             Be verbose
   -V             Display version and exit

---

recovermov

Recover movies from a filesystem image

root@kali:~# recovermov -h
Usage: recovermov [options] file|device
Options:
   -b blocksize   Block size in bytes
                  (default: 512)
   -n base_name   Basename of the mov files to create
                  (default: "video_")
   -h             This help message
   -i index       Initial movie index
   -o directory   Restore mov files into this directory
   -V             Display version and exit

---

remove-duplicates

Remove duplicates of the same file in the current directory

---

sort-pictures

Sort pictures according to exif date

root@kali:~# man sort-pictures
SORT-PICTURES(1)                                              SORT-PICTURES(1)

NAME
       sort-pictures - sort pictures according to exif date

SYNOPSIS
       sort-pictures

DESCRIPTION
       Sort-pictures uses the exif tags in jpeg pictures recovered by recover-
       jpeg in directories.  It creates hard links  to  organize  sorted  pic-
       tures.

       Running  sort-pictures  will scan the current directory for files named
       after the template image?????*.jpg (image followed  by  at  least  five
       characters  followed by .jpg).  A new hardlink will be created for each
       file in one of the following directories:

       o invalid The picture is an invalid JFIF file.

       o small The picture size is less than 100,000 bytes.

       o undated Sort-pictures was unable to determine the date of the picture
         from the exif tags.

       o YYYY-MM-DD A directory representing the date at which the picture was
         taken.

SEE ALSO
       recoverjpeg(1) remove-duplicates(1)

COPYRIGHT
       Copyright (c) 2004-2016 Samuel Tardieu <sam@rfc1149.net>.  This is free
       software; see the source for copying conditions.  There is NO warranty;
       not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

AUTHORS
       Samuel Tardieu <sam@rfc1149.net>.

User Manuals                   November 12, 2016              SORT-PICTURES(1)

---

 Edit this page recoverdm redfang