RecoverPy is a Linux terminal tool that interactively finds and recovers deleted or overwritten files by scanning disk blocks.
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal
RecoverPy is designed for Linux users who need to recover lost data from their partitions, including files that have been deleted or overwritten. Incident responders, forensic analysts, and system administrators can use this tool to quickly locate and restore important files by searching file contents directly on disk blocks.
RecoverPy must be run as root (sudo) to access disk partitions. It is Linux-only and requires common utilities like grep, dd, and lsblk. For best recovery chances, unmount the target partition before scanning and act quickly to avoid data overwriting. Using unique search strings improves accuracy.
Install required tools: grep, coreutils, util-linux, and optionally progress
For Debian/Ubuntu: sudo apt install grep coreutils util-linux progress
For Arch: sudo pacman -S grep coreutils util-linux progress
For Fedora: sudo dnf install grep coreutils util-linux progress
Run without installation using pipx: sudo pipx run recoverpy
Run without installation using uvx: sudo uvx recoverpy
Install from PyPI: python3 -m pip install recoverpy
Run the tool with root privileges: sudo recoverpysudo recoverpy
Launch RecoverPy with root privileges to start the interactive recovery process.
Select partition
Choose the Linux partition where the lost data is located for scanning.
Search content by string
Enter a unique string from the lost file to scan disk blocks and locate matching data.
Preview and recover
Interactively preview found blocks and save recovered files; explore adjacent blocks if needed.