• Browse by Tags

Recovering Data From An Old Encrypted Time Machine Backup

Recovering data from a backup should be an easy thing to do. At least this is what you expect. Yesterday I had a problem which should have been easy to solve, but it was not. I hope this blog post can help others who face the same problem.


The problem

1. I had an encrypted Time Machine backup which was not used for months
2. This backup was not on an official Apple Time Capsule or on a USB HDD, but on a WD MyCloud NAS
3. I needed files from this backup
4. After running out of time I only had SSH access to the macOS, no GUI

The struggle

By default, Time Machine is one of the best and easiest backup solution I have seen. As long as you stick to the default use case, where you have one active backup disk, life is pink and happy. But this was not my case.

As always, I started to Google what shall I do. One of the first options recommended that I add the backup disk to Time Machine, and it will automagically show the backup snapshots from the old backup. Instead of this, it did not show the old snapshots but started to create a new backup. Panic button has been pressed, backup canceled, back to Google.


Other tutorials recommend to click on the Time Machine icon and pressing alt (Option) key, where I can choose "Browse other backup disks". But this did not list the old Time Machine backup. It did list the backup when selecting disks in Time Machine preferences, but I already tried and failed that way.


YAT (yet another tutorial) recommended to SSH into the NAS, and browse the backup disk, as it is just a simple directory where I can see all the files. But all the files inside where just a bunch of nonsense, no real directory structure.

YAT (yet another tutorial) recommended that I can just easily browse the content of the backup from the Finder by double-clicking on the sparse bundle file. After clicking on it, I can see the disk image on the left part of the Finder, attached as a new disk.
Well, this is true, but because of some bug, when you connect to the Time Capsule, you don't see the sparse bundle file. And I got inconsistent results, for the WD NAS, double-clicking on the sparse bundle did nothing. For the Time Capsule, it did work.
At this point, I had to leave the location where the backup was present, and I only had remote SSH access. You know, if you can't solve a problem, let's complicate things by restrict yourself in solutions.

Finally, I tried to check out some data forensics blogs, and besides some expensive tools, I could find the solution.

The solution

Finally, a blog post provided the real solution - hdiutil.
The best part of hdiutil is that you can provide the read-only flag to it. This can be very awesome when it comes to forensics acquisition.


To mount any NAS via SMB:
mount_smbfs afp://<username>@<NAS_IP>/<Share_for_backup> /<mountpoint>

To mount a Time Capsule share via AFP:
mount_afp afp://any_username:password@<Time_Capsule_IP>/<Share_for_backup> /<mountpoint>

And finally this command should do the job:
hdiutil attach test.sparsebundle -readonly

It is nice that you can provide read-only parameter.

If the backup was encrypted and you don't want to provide the password in a password prompt, use the following:
printf '%s' 'CorrectHorseBatteryStaple' | hdiutil attach test.sparsebundle -stdinpass -readonly

Note: if you receive the error "resource temporarily unavailable", probably another machine is backing up to the device

And now, you can find your backup disk under /Volumes. Happy restoring!

Probably it would have been quicker to either enable the remote GUI, or to physically travel to the system and login locally, but that would spoil the fun.

Related links


  1. Hacker Tools 2019
  2. Hack Tools For Pc
  3. Hacking Tools For Games
  4. Hacking Tools Windows
  5. Beginner Hacker Tools
  6. Hacking Tools Name
  7. Termux Hacking Tools 2019
  8. Hacker Tools 2020
  9. Hacking Tools Download
  10. Ethical Hacker Tools
  11. Install Pentest Tools Ubuntu
  12. Hacking Tools 2019
  13. Hacking Tools
  14. Nsa Hacker Tools
  15. Hack And Tools
  16. Growth Hacker Tools
  17. Hacking Tools Free Download
  18. Termux Hacking Tools 2019
  19. Pentest Tools Port Scanner
  20. Hacker Tools
  21. Growth Hacker Tools
  22. Hacking Tools And Software
  23. Usb Pentest Tools
  24. Hacker Tools Apk Download
  25. Install Pentest Tools Ubuntu
  26. Easy Hack Tools
  27. Hack Apps
  28. Best Hacking Tools 2020
  29. Hack And Tools
  30. Hack Tools
  31. Hacker Tool Kit
  32. Hack Tool Apk
  33. Hacking Tools For Windows Free Download
  34. Hack Tools For Ubuntu
  35. Hacking Tools For Windows
  36. Pentest Tools Linux
  37. Pentest Tools Online
  38. What Are Hacking Tools
  39. New Hack Tools
  40. Hacker Tools 2020
  41. Pentest Tools Apk
  42. Pentest Tools Port Scanner
  43. New Hack Tools
  44. Hacking Tools Kit
  45. Hacking Tools 2019
  46. Hacker Tools Windows
  47. Best Pentesting Tools 2018
  48. Pentest Tools Bluekeep
  49. Hacker Tool Kit
  50. Hacker Tools Hardware
  51. Hackers Toolbox
  52. Usb Pentest Tools
  53. Nsa Hack Tools
  54. Hack Tools Download
  55. Hacking Tools Windows 10
  56. Hacker Tool Kit
  57. Hacking Tools Software
  58. Tools For Hacker
  59. Hacker Tools For Ios
  60. Pentest Tools Open Source
  61. Hacking Tools
  62. Hacking Tools Hardware
  63. Hacking Tools For Windows Free Download
  64. Hacker Tools For Ios
  65. Hacking Tools Kit
  66. Pentest Tools Android
  67. Hacker Tools For Pc
  68. Hack Tools For Pc
  69. New Hack Tools
  70. Hacking Tools For Games
  71. Hacker Hardware Tools
  72. Pentest Tools Find Subdomains
  73. Pentest Box Tools Download
  74. Hack Tools Online
  75. What Are Hacking Tools
  76. Hacking Tools For Pc
  77. Hacker Tools Free Download
  78. Hacker Tools
  79. Termux Hacking Tools 2019
  80. How To Hack
  81. Hacking Tools 2019
  82. Pentest Tools Nmap
  83. Kik Hack Tools
  84. Hacker Tools Github
  85. Hacking Tools Windows 10
  86. Hacker Tools Software
  87. Hacking Tools Usb
  88. Pentest Recon Tools
  89. Pentest Tools Android
  90. Hacking Tools For Windows 7
  91. Termux Hacking Tools 2019
  92. Hacking Tools For Windows
  93. Hacker Security Tools
  94. Nsa Hacker Tools
  95. Hack Tools For Ubuntu
  96. Hacker Tools 2019
  97. Hack Rom Tools
  98. Hacking Tools Pc
  99. Hacking Tools Pc
  100. Hacker Tools 2019
  101. Hack Rom Tools
  102. Hacker Search Tools
  103. How To Install Pentest Tools In Ubuntu
  104. Pentest Tools Online
  105. Hack Tools For Mac
  106. Hacker Hardware Tools
  107. Hack Tools 2019
  108. How To Make Hacking Tools
  109. Hacker Tool Kit
  110. Hak5 Tools
  111. What Is Hacking Tools
  112. Game Hacking
  113. Hack Tools Github
  114. Hacking Tools Windows
  115. Hacker Tools Hardware
  116. Hacker Tools Online
  117. Hacker Tools Free Download
  118. World No 1 Hacker Software
  119. Pentest Tools Windows
  120. Top Pentest Tools
  121. Pentest Tools
  122. Hacking Tools Windows 10
  123. Pentest Box Tools Download
  124. Hacker Tools 2019
  125. Pentest Tools List
  126. Tools For Hacker
  127. Install Pentest Tools Ubuntu
  128. Hack Tools
  129. Tools For Hacker
  130. Pentest Box Tools Download
  131. Hacking Tools For Kali Linux
  132. Hacking App
  133. Ethical Hacker Tools
  134. Best Pentesting Tools 2018
  135. Hacking Tools For Beginners
  136. Hacker Security Tools
  137. Underground Hacker Sites
  138. Pentest Tools Download
  139. Hacker Tools For Ios
  140. Beginner Hacker Tools
  141. Hacking Tools Online
  142. Pentest Tools For Android
  143. Hacker Security Tools
  144. Hack Tools For Games
  145. Pentest Tools Nmap
  146. How To Hack
  147. Hack Tools For Mac
  148. Hacking Tools For Pc
  149. Hacking Tools For Windows Free Download
  150. Hacking Tools Hardware
  151. Hack Tools
  152. Hacking Tools Github
  153. Hacker Tools Software
  154. Hack App
  155. Hacking Tools Windows
  156. Blackhat Hacker Tools
  157. Hacker Tools Software
  158. Pentest Tools Url Fuzzer
  159. Hack Tool Apk
  160. Hacker Security Tools
  161. Hacker Tools Windows

0 comments on "Recovering Data From An Old Encrypted Time Machine Backup"



Post a Comment