RecoverPy

You can already find plenty of solutions to recover deleted files, but it can be a hassle to recover overwritten files. RecoverPy searches through every block of your partition to find your request.

Demo

Installation

 RecoverPy is currently only available on Linux systems.

 Dependancies

Mandatory: To list and search through your partitions, recoverpy uses grep, dd, and lsblk commands.

Optional: To display real time grep progress, you can install progress.

To install all dependencies:

• Debian-like: apt install grep coreutils util-linux progress
• Arch: pacman -S grep coreutils util-linux progress
• Fedora: dnf install grep coreutils util-linux progress

 Installation from pip

python3 -m pip install recoverpy

Usage

python3 -m recoverpy

 You must have root access to use recoverpy.

If you are not logged as root use sudo recoverpy or log in....

Author

Magdalena Jarzębska

• BlogMay 2, 2022Lupo - Malware IOC Extractor and Debugging module for Malware Analysis Automation
• BlogMay 2, 2022DDexec - a technique to run binaries filelessly and stealthily on Linux using dd to replace the shell with another process
• BlogApril 28, 2022ADReaper - A fast enumeration tool for Windows Active Directory Pentesting written in Go
• BlogApril 27, 2022Shhhloader - SysWhispers Shellcode Loader