26
is there an open source way to recover deleted files from Android Internal Storage? (lemmy.ml)
submitted 2 years ago by to c/asklemmy@lemmy.ml
8 comments fedilink hide all child comments
 

hi all, accidentally deleted some audio files i need an hour ago. any way to get them back?

all 8 comments

sorted by: hot top controversial new old
[โ€“] 12 points 2 years ago* (1 child)

Can you mount the internal storage to a Linux machine, dd it to a .img file and try the usual data recovery tricks?

https://andreafortuna.org/2018/12/03/android-forensics-imaging-android-file-system-using-adb-and-dd/

EDIT: Apparently, you don't need dd. adb pull can do it.

adb pull /dev/block/mmcblk0 mmcblk0.img

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [โ€“] 10 points 2 years ago (1 child)

    That only works if the phone doesnt have disk encryption turned on since at the low level recovery tools work at an encrypted disk basically looks like gibberish; and since most phones nowdays have that option enabled by factory; i don't think it will give any results

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] [S] 4 points 2 years ago (1 child)

    i use graphene too

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] 6 points 2 years ago*

    From what i understood on graphene there is file based encryption instead of block based (whole partition is encrypted) to allow each user profile to have different keys; this is how it's written on the site

    (If i misunderstood what you where trying to tell me; i'm sorry, english isn't my first language and i wasnt able to understand if you meant to say it as a specification or as a "oh, you use graphene as well")

  • permalink
  • fedilink
  • source
  • parent
    • [โ€“] 5 points 2 years ago (2 children)

    First of all, I hope you have root. File recovery requires direct access to storage, and that's not possible without root. Unlocking the bootloader to gain root erases encryption keys, which will make previously deleted files unrecoverable.

    I'm a little surprised a quick web search doesn't find an Android port of PhotoRec.

    I just tested DiskDigger on a device running LineageOS 20 (Android 13), and it did not find any recoverable files with a full storage scan even though I deleted several jpegs immediately before running it. The non-root deleted photos scan did find some images, but that won't help you with audio files.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •