Scalpel
Fast, configurable file carver.
KaliParrotLinuxpassive
pkg: scalpel
Scalpel carves files from images using header/footer rules defined in its config — a faster Foremost alternative.
Syntax
scalpel -o {out} {image}
Example
scalpel -o carved disk.img
Carves files defined in scalpel.conf from the image.
Advantages
- Fast, config-driven carving
- Filesystem-agnostic
Disadvantages
- Needs config tuning
- No filenames
Tags
#carving#recovery
Official docs: Scalpel ↗
Related commands
Frequently asked questions
What is Scalpel used for?
Scalpel carves files from images using header/footer rules defined in its config — a faster Foremost alternative.
What is an example Scalpel command?
A common example is: scalpel -o carved disk.img — Carves files defined in scalpel.conf from the image.
Is Scalpel part of Kali Linux?
Yes. Scalpel ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install scalpel.
What category of security tool is Scalpel?
Scalpel is a Forensics tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.