Packages and Binaries:

recoverjpeg

recoverjpeg tries to recover JFIF (JPEG) pictures and MOV movies from a peripheral. This may be useful if you mistakenly overwrite a partition or if a device such as a digital camera memory card is bogus.

This package provides these executables: recoverjpeg, recovermov, remove-duplicates and sort-pictures. The remove-duplicates is useful to remove duplicate files found. sort-pictures can be used to sort pictures according to exif date.

This package acts as a carver (data carving) and is useful in forensics investigations.

Installed size: 65 KB
How to install: sudo apt install recoverjpeg

recoverjpeg

Recover jpeg pictures from a filesystem image

root@kali:~# recoverjpeg -h
Usage: recoverjpeg [options] file|device
Options:
   -b blocksize   Block size in bytes (default: 512)
   -d format      Directory format string in printf syntax
   -f format      File format string in printf syntax
   -h             This help message
   -i index       Initial picture index
   -m maxsize     Max jpeg file size in bytes (default: 6m)
   -o directory   Restore jpeg files into this directory
   -q             Be quiet
   -r readsize    Size of disk reads in bytes (default: 128m)
   -s cutoff      Minimal file size in bytes to restore
   -S skipsize    Size to skip at the beginning
   -v             Be verbose
   -V             Display version and exit

recovermov

Recover movies from a filesystem image

root@kali:~# recovermov -h
Usage: recovermov [options] file|device
Options:
   -b blocksize   Block size in bytes
                  (default: 512)
   -n base_name   Basename of the mov files to create
                  (default: "video_")
   -h             This help message
   -i index       Initial movie index
   -o directory   Restore mov files into this directory
   -V             Display version and exit

remove-duplicates

Remove duplicates of the same file in the current directory

root@kali:~# man remove-duplicates
REMOVE-DUPLICATES(1)                                      REMOVE-DUPLICATES(1)

NAME
       remove-duplicates  -  remove duplicates of the same file in the current
       directory

SYNOPSIS
       remove-duplicate [-f]

DESCRIPTION
       Removes duplicates of the same file in the current directory if  -f  is
       given.  If -f is not given, duplicate will be identified twice (once in
       every direction).

OPTIONS
       -f

COPYRIGHT
       Copyright (c) 2004-2016 Samuel Tardieu <[email protected]>.  This is free
       software; see the source for copying conditions.  There is NO warranty;
       not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

       If recoverjpeg saves your day and you liked it, you are welcome to send
       me the best rescued ones by email (please send only 800x600 versions of
       the  pictures) and authorize me to put them online (indicate which con-
       tact information you want me to use for credits).

SEE ALSO
       recoverjpeg(1) sort-pictures(1)

AUTHORS
       Samuel Tardieu <[email protected]>.

User Manuals                   November 12, 2016          REMOVE-DUPLICATES(1)

sort-pictures

Sort pictures according to exif date

root@kali:~# man sort-pictures
SORT-PICTURES(1)                                              SORT-PICTURES(1)

NAME
       sort-pictures - sort pictures according to exif date

SYNOPSIS
       sort-pictures

DESCRIPTION
       Sort-pictures uses the exif tags in jpeg pictures recovered by recover-
       jpeg  in  directories.   It  creates hard links to organize sorted pic-
       tures.

       Running sort-pictures will scan the current directory for  files  named
       after  the  template  image?????*.jpg  (image followed by at least five
       characters followed by .jpg).  A new hardlink will be created for  each
       file in one of the following directories:

       o invalid The picture is an invalid JFIF file.

       o small The picture size is less than 100,000 bytes.

       o undated Sort-pictures was unable to determine the date of the picture
         from the exif tags.

       o YYYY-MM-DD A directory representing the date at which the picture was
         taken.

SEE ALSO
       recoverjpeg(1) remove-duplicates(1)

COPYRIGHT
       Copyright (c) 2004-2016 Samuel Tardieu <[email protected]>.  This is free
       software; see the source for copying conditions.  There is NO warranty;
       not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

AUTHORS
       Samuel Tardieu <[email protected]>.

User Manuals                   November 12, 2016              SORT-PICTURES(1)