Project

General

Profile

replicant recovery

Added by s s 14 days ago

what is the process to recover a deleted file in replicant?

second question, can files be recovered even if the phone is wiped through recovery?

third question, if stock firmware has been flashed over to replace replicant, can anything from the previous replicant installation be recovered?


Replies (2)

RE: replicant recovery - Added by Andrés D 14 days ago

s s wrote:

what is the process to recover a deleted file in replicant?

My advice is not to try recovering inside Replicant. If it was deleted from an sdcard: shutdown the phone, remove the sdcard and use an undeleting tool from a Linux or Windows computer. If it was deleted from the internal mmc flash, dump the partition to a Linux computer:

$ adb exec-out dd if=/dev/block/bootdevice/by-name/userdata > data.img

and again use undeleting tools there.

second question, can files be recovered even if the phone is wiped through recovery?

Afaik, wiping usually recreates the filesystem without overwriting anything except the filesystem structures, so depending on the tool it could be possible to recover some data.

third question, if stock firmware has been flashed over to replace replicant, can anything from the previous replicant installation be recovered?

Writing data again to a partition, even if not reformated, greatly increases the chance of destroying the data. That's the main reason why I recommend extracting the data to a computer and then recover it there, because installing tools to the phone increases the chance of overwriting.

Andrés

RE: replicant recovery - Added by s s 13 days ago

the scenario is the phone was encrypted with a password on replicant then stock firmware was installed and the file was on internal memory.

the file was in pictures folder

now the phone also has twrp recovery, so can you please tell me what are the steps to be taken in order please including how to decrypt the recovered image?

    (1-2/2)