extundelete

Recover deleted files from ext3 or ext4 partitions by parsing the journal. See also date for Unix time information and umount for unmounting partitions. More information: <http://extundelete.sourceforge.net>.

Install

All systems
curl cmd.cat/extundelete.sh
Debian Debian
apt-get install extundelete
Ubuntu
apt-get install extundelete
Arch Arch Linux
pacman -S extundelete
image/svg+xml Kali Linux
apt-get install extundelete
Fedora
dnf install extundelete
Windows (WSL2)
sudo apt-get update sudo apt-get install extundelete
Raspbian
apt-get install extundelete
Dockerfile
dockerfile.run/extundelete

Recover deleted files from ext3 or ext4 partitions by parsing the journal. See also date for Unix time information and umount for unmounting partitions. More information: <http://extundelete.sourceforge.net>.

  • Restore all deleted files inside partition N on device X:
    sudo extundelete /dev/sdXN --restore-all
  • Restore a file from a path relative to root (Do not start the path with `/`):
    extundelete /dev/sdXN --restore-file path/to/file
  • Restore a directory from a path relative to root (Do not start the path with `/`):
    extundelete /dev/sdXN --restore-directory path/to/directory
  • Restore all files deleted after January 1st, 2020 (in Unix time):
    extundelete /dev/sdXN --restore-all --after 1577840400

© tl;dr; authors and contributors