Skip to content

Tools for reading or recovering files from an apple HFS+ filesystem

License

Notifications You must be signed in to change notification settings

nlitsme/hfstools

Repository files navigation

hfstool

Tools for reading Apple HFS+ filesystem images, written in perl.

Note: i wrote this about 9 years ago, in 2009, to help recovering data from a accidentally destroyed filesystem.

I do not intent to improve this project any further.

file description
bm.pl binary operations on bitmap files
diffls.pl compares ls -lR outputs
dumpbtree.pl dumps btree from saved cat+attr+ext files
findcat.pl find catalog on raw disk
findextendrec.pl find extents on raw disk
tsthfs.pl no program, just fns opening /dev/rdisk0s2
dumpblock.pl dumps disk block from /dev/rdisk0s2
dumphfs.pl dumps hfs bitmap summary from /dev/rdisk0s2
dumphfstree.pl dumps hfs cnid tree from /dev/rdisk0s2, optionally dump only one node
searchhfs.pl reads /dev/rdisk0s2, searches unalloced space for pattern
dmg2iso.pl
makgimg.pl creates large empty file
AttributeParser.pm
Bitmap.pm
CatalogParser.pm
ExtentParser.pm
HFSBtree.pm
HFSFile.pm
HFSForkData.pm
HFSUtils.pm
HFSVolume.pm
Harddisk.pm
Hexdump.pm

EXAMPLE

perl dumphfs.pl     --disk "/dev/rdisk2s2"

perl dumphfstree.pl --disk "/dev/rdisk2s2" 4

AUTHOR

Willem Hengeveld [email protected]

About

Tools for reading or recovering files from an apple HFS+ filesystem

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages