Post: Recover non backed up files from an iDevice (mac)
Options
06-09-2011, 06:21 PM
#1
OscarMike
Keeper
If you have lost any data for example; Photos, Contacts, Calenders, Videos after restoring without a backup on your computer then ALL IS NOT LOST. There are ways which you can get back this data to put back onto your iPhone/iPod!
How/Why is the Data kept?
The Data is still held on the iDevice, however, is put into a partition where the files can be overwritten. This means that the files can still be accessed using the right methods, however, the average person/Phone Unlock Shop does not know how to do this.
So long as you have a Computer, preferable a Mac running OSX (though it can be done on Windows and Linux too, separate tutorial will be made later ) and a wireless internet router then you will be able to do this.
What do I need?
Jailbroken iDevice
Cydia
SSH Client on iDevice (OPENSSH)
Mac
SSH Client on PC (WINSCP ect)
DD Utility (Should be pre installed)
Data Recovery Software. I used Data Rescue 3
SQLite Database Browser
The First part of this is that YOU SHOULD NOT ADD ANYTHING ONTO YOUR iDEVICE! Simply Jailbreak it using either PWNAGE tool(for Mac) or SN0WBREEZE(for Windows). If you are using an older iDevice, then install "Installer" and from the Installer menu, download BSD Subsystem. If you are using Cydia, then download the OpenSSH app (available free!).
Next, you need to set your iDevice auto lock to "NEVER", along with collecting the IP address for the device. This can be located under
Settings > Wifi > Blue Arrow (Next to connected network) > DHCP > IP Address
Once you have obtained this, follow the stages below.
Mac OSX
1) Open Terminal up. (Should Display
‘Macintosh:~ Username$’
The ‘Username’ will be your username.2) Type
ssh root@<IP of iDevice>
3) Should Ask for a Password - Password is
alpine
Press return. PASSWORD WONT COME UP ON SCREEN.
4) You should see
Yourname-iPhone:~ root#
5) Enter into Terminal
ssh root@< iPhone-IP > dd if=/dev/rdisk0s2 bs=4096 | dd of=UserData3G.img
for a 3G, or
ssh root@< iPhone-IP > dd if=/dev/rdisk0s2s1 bs=4096 | dd of=UserData3GS.img
for a 3GS or even for a 4G
ssh root@< iPhone-IP > dd if=/dev/rdisk0s2s1 bs=4096 | dd of=UserData4G.img
6) You will NOT see a Progress Bar or anything, simply open "Finder", select <username> and it will be going in there.
7) WAIT! For an 16Gb iPhone, it took me about 4 hours over a Wireless-n connection to get this across. Simply wait out and IT WILL WORK.
8.)To check if it has finished, flick back to "Terminal", you will see something like
31719424+0 records in
31719424+0 records out
16240345088 bytes ( 16 GB ) copied, 14157.6 s, 3.9 hours, 1.1 MB/s
31719424+0 records in
31719424+0 records out
16240345088 bytes transferred in 14165.779345 secs (1146449 bytes/sec)
You will have a .dmg file which if you click you cannot mount. However, if you open Disk Utility, you will be able to browse for and open this file, which will then give you an option to "OPEN" in the top toolbar. If you select this you should see 1 or more grey partitions. This means success!
Next, you will need a Data Recovery Tool, I used "Data Rescue 3" and the Tutorial will now continue to explain the following steps as if using Data Rescue.
Recovering the Data.
As most of the things you will need are stored in a SQLight Database, you will need more advanced software to support recovery of these. This is included in Data Rescue 3, and this link will enable you to browse the files.
1) Mount Partitions in Disk Utility.
2) Make sure you have show disk imaged selected.
3) Select Data Partition (largest one/only one)
4) Enter Data Rescue 3 / or other Software.
5) Perform "Deep Scan"
6) Browse to the folder once the process is complete, should take about 20 mins.The Folder that you are looking for will be called "Reconstructed Files".
(Note: the 'found files' section is the live data from your iPhone you wont need this if your iPhone has been recently restored.. but this data is organized with the correct file structure and file names so if you want the live data you can recover here !)
Photos, Videos ect are stored in here, however to find the Contacts, SMS, Locations, ect, you will need to browse the Database files in SQLight Database Browser. There is no fast way to determine which database, so simply open the biggest first and work from there onwards!
When you open one of your recovered databases you will want to select the browse data tab. this will let you view the table data for that information. When you find what you want then simply export this to a CSV so it can be used later!
You must login or register to view this content. and You must login or register to view this content. will help for data recovery
SOURCES: My *Other Site* account under which this was originally posted and also to Multiplazz from sinfuliphone You must login or register to view this content. because I couldn't be bothered to write out all the data logs
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
