PhotoRec
Carve files regardless of filesystem.
KaliParrotLinuxpassive
pkg: testdisk
PhotoRec recovers files by signature from disks, memory cards or images — ignoring the filesystem.
Syntax
photorec
Example
sudo photorec disk.img
Carves recoverable files from the image into a recovery folder.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
photorec
Usage examples
photorec disk.img
Carve recoverable files by signature.
Advantages
- Recovers 480+ file types
- Filesystem-agnostic
Disadvantages
- No original filenames
- Manual sorting after
Tags
#carving#recovery
Official docs: PhotoRec ↗
Related commands
Frequently asked questions
What is PhotoRec used for?
PhotoRec recovers files by signature from disks, memory cards or images — ignoring the filesystem.
What is an example PhotoRec command?
A common example is: sudo photorec disk.img — Carves recoverable files from the image into a recovery folder.
Is PhotoRec part of Kali Linux?
Yes. PhotoRec ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install testdisk.
What category of security tool is PhotoRec?
PhotoRec is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.