Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.
Thread: HOW TO: iPhone Data Recovery
11-26-2010, 10:56 AM #161
Just took a look at the dmg and looks like all file _data_ is encrypted.. Note that when you mount it on the phone, you can read decrypted files, but obviously not the ones that were deleted. So, if your phone doesn't boot but data partition is mountable in SSH, you can copy those files, but if you've deleted files or the partition doesn't mount, you seem to be screwed, at least until someone figures how to decode the file data.
11-29-2010, 09:21 AM #162
Yeah I am thinking the encryption situation might be whats going on...im going to try some other tools like scalpel to see if i cqan get anything from them. Any other ideas?
12-01-2010, 08:57 AM #163
I'm in same situation "3Gs iOS4" with encrypted user partition image.
I'v heard something about /private/var/keybags/systembag.kb
that keeps the keys.
any idea how to use it?
12-12-2010, 10:53 AM #164
i'm using iphone 4 os 4.1
i already tried anything
for transfering img file to
dd if=/dev/rdisk0s2 bs=4096 | ssh [email protected] 'dd of=iphone_rdisk0s2_4096.img'
dd if=/dev/rdisk0s2 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2_4096KB.img'
dd if=/dev/rdisk0s2s1 bs=4096KB | ssh [email protected] 'dd of=iphone_rdisk0s2s1_4096KB.img'
dd if=/dev/disk0 | ssh <username>@<computer-ip> 'dd of=iphone-dump.img'
but when i input the password
always got "setgid : invalid argument"
anyone can help me please???
12-14-2010, 12:40 PM #165
Saintx7, iOS 4.1 uses disk encryption. Even if you are able to get an img file. You will not be able to recover files from the image file.
12-14-2010, 11:26 PM #166
12-22-2010, 03:27 PM #167
I'm not sure if I can post a link, but google is your friend.
12-22-2010, 09:12 PM #168
12-23-2010, 01:36 PM #169
12-26-2010, 11:21 PM #170
i would really really appreciate if you can also pm me the link for the method of extracting 4.2.1 deleted files. thanks x 100,0000000...
hope u had a nice christmas and wish u a very happy new year.
12-28-2010, 11:59 AM #171
I have found a program similar to Iphone backup extractor!!!!!!!
I'm a window user and usually there are backup extractor out there for mac's for free. Until I found this program, I have been searching the web for weeks and weeks to retrieve pics of my newborn and son that I had lost. I have read blogs, threads dating back to 2008, I was so determine that my wife thought that I was cheating on her with the pc lol.
I know this is silly but to some of us...pictures are priceless.
There is no commands needed, don't have to use mobile terminal just download and find your last backup.
Don't forget to hit the thank you button if I have helped you.
Last edited by 143voltron; 12-28-2010 at 12:08 PM. Reason: spelling
12-29-2010, 06:53 AM #172
12-30-2010, 09:30 AM #173
Many thanks and I'll keep everyone posted.
12-30-2010, 11:13 AM #174
I am having difficulties recovering my pictures from my iphone 3g image as well. Photorec just found text, pngs (junk ones) as well as other random junk files.
Currently this is where im at:
Jailbroke my iphone
installed unbuntu onto a bootable flash drive
ssh from iphone into desktop
used this command: dd if=/dev/disk0 | ssh root@<computer-ip> 'dd of=/media/<HARDRIVE_NAME>/iphone-dump.img'
tried photorec, but didnt find anything useful
Any suggestions on what to try next to recover photos?
Also, if anyone are having difficulty with any of the things i have done, msg me and ill be happy to answer.
Thanks, Ill also update with my progress.
12-30-2010, 12:15 PM #175
is there any sort of prompt after you enter your password? it just seems to be hanging atm. I entered the dd if=/dev/rdisk0s2s1 bs=4096KB | ssh <user>@<comp ip here> 'dd of=iphone_rdisk0s2s1_4096KB.img' etc command just now on a iphone 3gs (old bootrom) 4.2.1
12-30-2010, 12:20 PM #176
From my experience, thats a good thing!
Your iphone will hang while the file is being transferred.
When the iphone is done transferring a prompt will show up, it took about 4 hours or so for my 8gig image.
Also, i was able to refresh the file on my desktop as it was being sent and see the disk image increasing in size.
Hope this helps!
The Following User Says Thank You to odi3 For This Useful Post:
12-30-2010, 12:23 PM #177
12-30-2010, 12:34 PM #178
On my transfer, i specified it to 'dd of=/media/<HARDRIVE_NAME>/iphone-dump.img'
which was my windows hard drive mounted in the media folder
since you didnt specify a location, im not really sure.. my guess would be your home folder in linux? (I wasnt able to do this because i didnt have the room on my usb key to have my 8gb image from iphone and all the ubuntu stuff, my usb ubuntu drive was only 8 gigs in total)
I noticed when oyu sent your file u added bs=4096KB, whats that for? and is it needed?
12-30-2010, 12:43 PM #179
01-02-2011, 05:49 PM #180
I think if you did a restore, your data is gone (along with mine)
I have used about 6 different programs to recover the data and none offer any of the old pics that were on the phone.