Page 1 of 1

[Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift + D

Posted: 27 Dec 2011, 13:26
by thrvers
A Frugal, High Performance File Carver

A fast file carver that reads a database of header and footer definitions and extracts matching files from a set of image files or raw device files.
Scalpel is filesystem-independent and will carve files from FATx, NTFS, ext2/3, or raw partitions. It is useful for both digital forensics investigation and file recovery.
  • install scalpel, bisa lewat UbuntuSoftwareCenter, Synaptic atau

    Code: Select all

    $ sudo apt-get install scalpel
  • kenali partisi tempat file tersebut terhapus, misal di /home/thrvers/Documents/file.pdf
    misal dengan bantuan terminal, buat mencari /home berada dipartisi mana?

    Code: Select all

    $ df -h
    $ sudo fdisk -l
    $ pwd
    dan lain-lain
  • identifikasi tipe file, misal contoh diatas tipe file pdf

    Code: Select all

    $ sudo gedit /etc/scalpel/scalpel.conf
    hilangkan tanda pagar (#) seperti contoh, lalu simpan:

    Image
  • cara mengembalikan data, contoh:

    Code: Select all

    $ sudo scalpel /dev/sda3 -o /home/thrvers/Desktop
    dimana:
    - /dev/sda3 : dapat dikenali dari step no.2 diatas
    - -o : output ke folder (terserah, yg penting folder kosong)

    Image
  • Hasilnya:

    Image

    Setelah dicari2, ketemu juga:
    Image
Mesin tes: Intel E5400 2.7GHz, RAM 1GB, Filesystem ext4
Sumber: Recover Your Deleted Files In Linux using Scalpel Utility

- Selamat Mencoba -

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 13:33
by IntegerManual
Bookmarked :)
Kebetulan, thankx berat...

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 13:34
by blackshirt
greats :grin:

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 13:40
by abu_unaisah
like

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 14:06
by ilham2930
nice share masbro..

btw, itu gambarnya di edit y masbro, hiksss.... :D :grin:

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 14:21
by _Newbie_
jos

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 14:47
by thrvers
'
ilham2930 wrote:...
btw, itu gambarnya di edit y masbro, hiksss.... :D :grin:

OOT
sambil belajar gimp mas ilham2930 :malu:

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 16:05
by Malsasa
Menjurus ke keahlian forensik. Moga-moga bermanfaat dan tidak disalahgunakan :D

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 16:26
by masdana
wow, mantap ni :D

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 16:31
by agus_sintang
makasih bang thrvers... K & H

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 21:03
by lisnux
coba dulu ah ....

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 21:52
by thrvers
'
lisnux wrote:coba dulu ah ....

paling suka kalau ada yg mencoba juga :grin:
[spoiler]tinggal nunggu laporannya[/spoiler]

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 22:15
by buzzing_bee
itu beneran di delete mas pdfnya ??? :D
dan bener2 ke recover nda ?? :D

aku pernah pake scalpel tapi kok gagal ya :confused:

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 27 Dec 2011, 23:12
by thrvers
'
buzzing_bee wrote:itu beneran di delete mas pdfnya ??? :D
dan bener2 ke recover nda ?? :D

aku pernah pake scalpel tapi kok gagal ya :confused:

beneran kak buzzing_bee :D = apa mungkin versi 1.60 yah??
q tes /home/thrvers/Documents/file.pdf (ukuran 1.6MB)
(dari beberapa file diatas ada juga yg pdf kosong)

NB: maaf q samarin nama filenya :D - isinya manual book distro.

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 07 Aug 2012, 11:16
by zeads
okelah kalo begitu... :grin:

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 08 Feb 2013, 00:41
by enoW
Trimakasih infonya. Bookmarked.

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 08 Feb 2013, 01:25
by pingsut
ijin bukmak mas, buat jaga-jaga :D

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 08 Feb 2013, 23:38
by neha
gan, ane barusan migrasi dari windows k ubuntu, trus salh instal, jadi nya HD ane yg semula 3 partisi (C,D,E) jadi hilang dan semua data kehapus,.ap bsa di balikin pke ini gan?
mohon pncerahanny gan

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 08 Feb 2013, 23:47
by thrvers
'
kak neha, silakan cari bahasan tentang 'testdisk' untuk masalah tersebut.

sedangkan 'scalpel' untuk masalah file yang terhapus, bukan partisi.

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 09 Feb 2013, 14:28
by neha
ok,.thank y gan

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 11 Feb 2013, 18:19
by neha
bos, tolong dong, spt ny recovery sukses, tpi file/folder hasil recovery ga bisa di buka,

penampakan ny gan,.


gmn nih gan bwt bsa buka ny?

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 15 Feb 2013, 10:21
by 23Pstars
info yang sangat berguna gan :)

Re: [Berbagi] Scalpel, Recovery File yg Terhapus oleh ‘Shift

Posted: 15 Feb 2013, 10:24
by sta
@neha coba buka terminal > ketik : sudo nautilus /home/neha