The previous method of using adb to perform mirroring still has two problems. The command line operation is cumbersome, and the files downloaded from the /data/local/tmp directory may overwrite the deleted data.
This article will provide a method to solve the problems encountered before, and to solve the cumbersome method of command line operation, but also to use a graphical interface program. Through the previous attempts, a graphical interface program, RANFS-Android image forensics tool , is designed. The main interface is as follows:
Download address : http://ranfs.com/cn/?RFAI
The basic idea is that the graphical interface calls the adb command to complete the installation and operation of programs such as RFSD, and then completes the backup of the Android data partition through the network. Solved here, the problem of no longer writing any data to the data partition after root, the shell code is as follows:
su
mount -o rw,remount rootfs /
chmod 777 /cache
mkdir /cache/rfai
chmod 777 /cache/rfai
In this way, you can /cache/rfaiinstall and execute directly through adb push files to the directory without overwriting the data deleted from the data partition.
At this point, the Android data mirroring work has come to an end, and basically all the problems have been solved. It is true that the difficulty of mobile phone data recovery is no longer in the data mirroring work, but I hope this tool can become one of your choices.