cgsecurity.org

Hello all,

I've been dealing with the 1/2 working hard drive, maybe i should say (1/8)


anyway, the super-block for the main partition is bad, its all 0000000's according to the testdisk dump report,

test disk does find the backup superblock, and it allows me to attempt and copy the backup superblock to the corrupted superblock, but then it fails,

i just want to mount the hard drive in linux, but i need to point it to the backup superblock address instead, get a few files off, and be done with it,

how can I get the address of the backup superblock using test disk? i don't want to repair the corrupted superblock!

I have the raw dump from test disk, can i just make a new superblock on a new location?


Hani Ewais

The HFS+ backup superblock is using the last 1024 bytes of the partition (the last 2 sectors, for a disk using 512 bytes sector).
If you need the partition location/size/... in sectors, run as root "testdisk -lu"