Skip to content

Instantly share code, notes, and snippets.

@bonyiii
Last active April 20, 2023 15:01
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save bonyiii/1471379 to your computer and use it in GitHub Desktop.
Save bonyiii/1471379 to your computer and use it in GitHub Desktop.
restore overwritten files linux
http://www.ehow.com/how_7517984_restore-overwritten-file-linux.html
Assess which partition on your computer you need to access to recover the files.
2
Unmount the directory using the "unmount" command in the interface. This will help prevent damaging the file you are trying to recover.
3
Type "debugfs" in the command line interface (all typing without quotation marks) and include the file system where the overwritten file is into the command. For example, typing "debugfs usr/personal" will bring up your personal directory. Hit "Enter" after typing the command.
4
Use the "lsdel" command by typing "lsdel" in the command line interface and hitting "Enter" while the system is being debugged. This will bring up a list of overwritten and deleted files in the file system.
5
Recover the overwritten files by typing the command "dump filename" in the command line interface and hitting "Enter."
6
Type in the "inode" number associated with the files you want to retrieve, which is located in the first column that is displayed in by the "Isdel" command.
@hyperreality
Copy link

Nice guide, but it's lsdel rather than Isdel

@cmar1965
Copy link

cmar1965 commented Feb 6, 2021

@ #

@cmar1965
Copy link

cmar1965 commented Feb 6, 2021

@bonyiii
Copy link
Author

bonyiii commented Feb 7, 2021

Thanks, updated.

@TomTom101
Copy link

TomTom101 commented Sep 6, 2022

And it's umount, not unmount

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment