cgsecurity.org

am i doing something wrong? I am only getting a bunch of text files, no jpg even though there are still a lot of photos in my photos app and other sync pictures. I am on OSX 10.9 using photorec 6.14

i made the image of the iPhone using this

dd if=/dev/rdisk0 bs=4096 | ssh -C username@computer_IP 'dd of=iphone.img'

then use cd testdisk-6.14
./photorec ~/iphone.img

I tried enabling/disable brute force, checking all file types, disabling all file types and only checking jpg,

i only come up with one jpg which is the a gray background of the original iPhone wallpaper. really weird. So I want to know how do I recover the deleted pictures from my photos app on iPhone. Thank you in advance

Some information about recovering data from an Iphone:
http://www.cgsecurity.org/wiki/Recover_ ... _an_iPhone
Just as mentionned in the link above, use it at your own risk.
Jailbreaking your Iphone can void warranty.

Fiona

Yes. You are just repeating what I did. I got the information on how to recover from an iPhone from that page. I am asking is am I doing something wrong? Any other steps I need to do besides those? I only have txt files that starts with a f and I am not sure what to do with those. It only recovered a jpg file and that is a default wallpaper on the iPhone.

Help please? If anyone have experience with recovering from an iPhone?

Thanks in advance

When you are going to recover deleted photos from iPhone, you are required to check whether you backup them in iTunes, because iTunes can automatically backup data unless you manually stop backup. By doing this to check the backup
Launch iTunes
iTunes > Preferences > Devices
If the backup exists, you can recover them easily
If not, you turn to help for the third party software such iPhone data recovery

Hi cybermaid, I have the same issue, did you manage to do this in the end?

Fiona, do you know if it is possible to recover photos after a factory reset on an iPhone 5?

I've been searching for some time about this and I couldn't figure out if for iphone 5 and + is not possible to decrypt the files so they could be extracted and actually read.

On the tutorial: http://www.cgsecurity.org/wiki/Recover_ ... _an_iPhone
is mentioned: "Note that data is encrypted by default on iPhone 4, so you need to decrypt the data first: http://code.google.com/p/iphone-dataprotection/"

But actually in the project page I couldn't figure out if the tools still work or not.

Also about the note, I can't understand if the decryption has to be done before or after the extraction of the possible information.

Well I'm actually testing on an iphone 6.
I was already able to jailbreak it, extract the image of rdisk0 to a local drive and extract information with photorec but apparently the information extracted is just the system information that is not encrypted. I just get JPGs files of icons and app stuff.

Is there anyone that can help me understand the next steps?
to recover already deleted information from my phone?

Thank you in advanced