recovered deleted photo from iPhone 5

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
cybermaid
Posts: 2
Joined: 01 Jul 2014, 07:10

recovered deleted photo from iPhone 5

#1 Post by cybermaid »

am i doing something wrong? I am only getting a bunch of text files, no jpg even though there are still a lot of photos in my photos app and other sync pictures. I am on OSX 10.9 using photorec 6.14

i made the image of the iPhone using this

dd if=/dev/rdisk0 bs=4096 | ssh -C username@computer_IP 'dd of=iphone.img'

then use cd testdisk-6.14
./photorec ~/iphone.img

I tried enabling/disable brute force, checking all file types, disabling all file types and only checking jpg,

i only come up with one jpg which is the a gray background of the original iPhone wallpaper. really weird. So I want to know how do I recover the deleted pictures from my photos app on iPhone. Thank you in advance

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: recovered deleted photo from iPhone 5

#2 Post by Fiona »

Some information about recovering data from an Iphone:
http://www.cgsecurity.org/wiki/Recover_ ... _an_iPhone
Just as mentionned in the link above, use it at your own risk.
Jailbreaking your Iphone can void warranty.

Fiona

cybermaid
Posts: 2
Joined: 01 Jul 2014, 07:10

Re: recovered deleted photo from iPhone 5

#3 Post by cybermaid »

Yes. You are just repeating what I did. I got the information on how to recover from an iPhone from that page. I am asking is am I doing something wrong? Any other steps I need to do besides those? I only have txt files that starts with a f and I am not sure what to do with those. It only recovered a jpg file and that is a default wallpaper on the iPhone.

Help please? If anyone have experience with recovering from an iPhone?

Thanks in advance

cassygor
Posts: 1
Joined: 18 Jul 2014, 05:04

Re: recovered deleted photo from iPhone 5

#4 Post by cassygor »

When you are going to recover deleted photos from iPhone, you are required to check whether you backup them in iTunes, because iTunes can automatically backup data unless you manually stop backup. By doing this to check the backup
Launch iTunes
iTunes > Preferences > Devices
If the backup exists, you can recover them easily
If not, you turn to help for the third party software such iPhone data recovery

will007
Posts: 33
Joined: 19 Sep 2015, 10:10

Re: recovered deleted photo from iPhone 5

#5 Post by will007 »

Hi cybermaid, I have the same issue, did you manage to do this in the end?

Fiona, do you know if it is possible to recover photos after a factory reset on an iPhone 5?

thepcrew
Posts: 2
Joined: 16 Oct 2015, 16:38

Re: recovered deleted photo from iPhone 5

#6 Post by thepcrew »

I've been searching for some time about this and I couldn't figure out if for iphone 5 and + is not possible to decrypt the files so they could be extracted and actually read.

On the tutorial: http://www.cgsecurity.org/wiki/Recover_ ... _an_iPhone
is mentioned: "Note that data is encrypted by default on iPhone 4, so you need to decrypt the data first: http://code.google.com/p/iphone-dataprotection/"

But actually in the project page I couldn't figure out if the tools still work or not.

Also about the note, I can't understand if the decryption has to be done before or after the extraction of the possible information.

Well I'm actually testing on an iphone 6.
I was already able to jailbreak it, extract the image of rdisk0 to a local drive and extract information with photorec but apparently the information extracted is just the system information that is not encrypted. I just get JPGs files of icons and app stuff.

Is there anyone that can help me understand the next steps?
to recover already deleted information from my phone?

Thank you in advanced

Locked