Recovering undeleted data from a drive with no MBR

If it doesn't fit anywhere else, it will fit here.

Recovering undeleted data from a drive with no MBR

Postby CrimpJiggler » Wed Apr 04, 2012 6:07 am

I was wiping my harddrive clean but at 5% I remembered I forgot to back something up so I stopped it. The drive has no MBR now though so I can't mount it. Is there a simple way to get the data considering its not actually deleted?
CrimpJiggler
n00b
 
Posts: 25
Joined: Sun Aug 28, 2011 3:01 pm

Re: Recovering undeleted data from a drive with no MBR

Postby Cool_Fire » Wed Apr 04, 2012 6:33 pm

It all depends.
If there was partitioning done on the drive, and it's not the first partition that you need data off, chances are good you'll be able to recover your data, since it'll still have all it's filesystem data, just no reference to where the partition starts. (As this information is stored in the MBR.)

In the case of no partitions or the first partition holding the data you need, you're going to be in a lot worse shape.
Being that 5% of the drive most likely is well past any inode/FAT/whatever tables, it may become very difficult to identify what on the disk is data, where files start and end and what is garbage. How much of this information can be recovered depends on the filesystem you used on the partition and in some cases how it's configured.

But even when none of this information can be recovered, all is not lost. It is possible to just traverse the entire drive/partition and look for certain signatures that denote specific file types. Without going into too much detail, this obviously requires speciality software with intimate knowledge on the type of file and filesystem you want to recover.
If we're breaking the rules, then how come you can't catch us? You can't find us? I know why. Cause, it's ... MAGIC!

Hackerthreads chat, where the party is going 24/7.
User avatar
Cool_Fire
Not a sandwich
 
Posts: 1560
Joined: Fri May 09, 2003 1:20 pm
Location: 41 6d 73 74 65 72 64 61 6d

Re: Recovering undeleted data from a drive with no MBR

Postby CrimpJiggler » Sun Apr 08, 2012 7:39 pm

Ah well, I suppose I have to just forget about the data then. It was a folder with all the web apps and PHP scripts I had made over the years but I suppose its better like this because I'll learn more by starting from scratch, rather than looking in my folder for old scripts that I can modify a bit etc.
CrimpJiggler
n00b
 
Posts: 25
Joined: Sun Aug 28, 2011 3:01 pm


Return to General

Who is online

Users browsing this forum: No registered users and 0 guests