Packages and Binaries:

recoverjpeg

recoverjpeg tries to recover JFIF (JPEG) pictures and MOV movies from a peripheral. This may be useful if you mistakenly overwrite a partition or if a device such as a digital camera memory card is bogus.

This package provides these executables: recoverjpeg, recovermov, remove-duplicates and sort-pictures. The remove-duplicates is useful to remove duplicate files found. sort-pictures can be used to sort pictures according to exif date.

This package acts as a carver (data carving) and is useful in forensics investigations.

Installed size: 65 KB
How to install: sudo apt install recoverjpeg

recoverjpeg

Recover jpeg pictures from a filesystem image

root@kali:~# recoverjpeg -h
Usage: recoverjpeg [options] file|device
Options:
   -b blocksize   Block size in bytes (default: 512)
   -d format      Directory format string in printf syntax
   -f format      File format string in printf syntax
   -h             This help message
   -i index       Initial picture index
   -m maxsize     Max jpeg file size in bytes (default: 6m)
   -o directory   Restore jpeg files into this directory
   -q             Be quiet
   -r readsize    Size of disk reads in bytes (default: 128m)
   -s cutoff      Minimal file size in bytes to restore
   -S skipsize    Size to skip at the beginning
   -v             Be verbose
   -V             Display version and exit

recovermov

Recover movies from a filesystem image

root@kali:~# recovermov -h
Usage: recovermov [options] file|device
Options:
   -b blocksize   Block size in bytes
                  (default: 512)
   -n base_name   Basename of the mov files to create
                  (default: "video_")
   -h             This help message
   -i index       Initial movie index
   -o directory   Restore mov files into this directory
   -V             Display version and exit

remove-duplicates

Remove duplicates of the same file in the current directory

root@kali:~# man remove-duplicates
REMOVE-DUPLICATES(1)                                       REMOVE-DUPLICATES(1)

NAME
       remove-duplicates  -  remove  duplicates of the same file in the current
       directory

SYNOPSIS
       remove-duplicate [-f]

DESCRIPTION
       Removes duplicates of the same file in the current directory  if  -f  is
       given.   If -f is not given, duplicate will be identified twice (once in
       every direction).

OPTIONS
       -f

COPYRIGHT
       Copyright (c) 2004-2016 Samuel Tardieu <[email protected]>.  This is  free
       software;  see the source for copying conditions.  There is NO warranty;
       not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

       If recoverjpeg saves your day and you liked it, you are welcome to  send
       me  the best rescued ones by email (please send only 800x600 versions of
       the pictures) and authorize me to put them online (indicate  which  con-
       tact information you want me to use for credits).

SEE ALSO
       recoverjpeg(1) sort-pictures(1)

AUTHORS
       Samuel Tardieu <[email protected]>.

User Manuals                   November 12, 2016           REMOVE-DUPLICATES(1)

sort-pictures

Sort pictures according to exif date

root@kali:~# man sort-pictures
SORT-PICTURES(1)                                               SORT-PICTURES(1)

NAME
       sort-pictures - sort pictures according to exif date

SYNOPSIS
       sort-pictures

DESCRIPTION
       Sort-pictures  uses the exif tags in jpeg pictures recovered by recover-
       jpeg in directories.  It creates hard links to organize sorted pictures.

       Running sort-pictures will scan the current directory  for  files  named
       after  the  template  image?????*.jpg  (image  followed by at least five
       characters followed by .jpg).  A new hardlink will be created  for  each
       file in one of the following directories:

       o invalid The picture is an invalid JFIF file.

       o small The picture size is less than 100,000 bytes.

       o undated  Sort-pictures was unable to determine the date of the picture
         from the exif tags.

       o YYYY-MM-DD A directory representing the date at which the picture  was
         taken.

SEE ALSO
       recoverjpeg(1) remove-duplicates(1)

COPYRIGHT
       Copyright  (c) 2004-2016 Samuel Tardieu <[email protected]>.  This is free
       software; see the source for copying conditions.  There is NO  warranty;
       not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

AUTHORS
       Samuel Tardieu <[email protected]>.

User Manuals                   November 12, 2016               SORT-PICTURES(1)