cgsecurity.org

Hi,

You can try to create a custom photorec.sig signature. It may be easier that modifing file_zip.c
zip 100 0x50 0x4b 0x03 0x04

I thought about this already, however I was under the impression that the recovery in file_zip.c tries to find matching chunks of data-streams accross spread out ...

Hello,

I need to carve several ZIP-Files from unallocated space (was ext3). Unfortunately those files are fragmented and traditional methods like extundelete fail due to the amount of deleted files.

However with this recovery comes a twist. The specific storage system stores 100bytes of metadata ...