Recovering Data From An Old Encrypted Time Machine Backup
Posted
by Frames
on 11:15 PM
Recovering data from a backup should be an easy thing to do. At least this is what you expect. Yesterday I had a problem which should have been easy to solve, but it was not. I hope this blog post can help others who face the same problem.
The problem
1. I had an encrypted Time Machine backup which was not used for months2. This backup was not on an official Apple Time Capsule or on a USB HDD, but on a WD MyCloud NAS
3. I needed files from this backup
4. After running out of time I only had SSH access to the macOS, no GUI
The struggle
By default, Time Machine is one of the best and easiest backup solution I have seen. As long as you stick to the default use case, where you have one active backup disk, life is pink and happy. But this was not my case.As always, I started to Google what shall I do. One of the first options recommended that I add the backup disk to Time Machine, and it will automagically show the backup snapshots from the old backup. Instead of this, it did not show the old snapshots but started to create a new backup. Panic button has been pressed, backup canceled, back to Google.
Other tutorials recommend to click on the Time Machine icon and pressing alt (Option) key, where I can choose "Browse other backup disks". But this did not list the old Time Machine backup. It did list the backup when selecting disks in Time Machine preferences, but I already tried and failed that way.
YAT (yet another tutorial) recommended to SSH into the NAS, and browse the backup disk, as it is just a simple directory where I can see all the files. But all the files inside where just a bunch of nonsense, no real directory structure.
YAT (yet another tutorial) recommended that I can just easily browse the content of the backup from the Finder by double-clicking on the sparse bundle file. After clicking on it, I can see the disk image on the left part of the Finder, attached as a new disk.
Well, this is true, but because of some bug, when you connect to the Time Capsule, you don't see the sparse bundle file. And I got inconsistent results, for the WD NAS, double-clicking on the sparse bundle did nothing. For the Time Capsule, it did work.
At this point, I had to leave the location where the backup was present, and I only had remote SSH access. You know, if you can't solve a problem, let's complicate things by restrict yourself in solutions.
Finally, I tried to check out some data forensics blogs, and besides some expensive tools, I could find the solution.
The solution
Finally, a blog post provided the real solution - hdiutil.The best part of hdiutil is that you can provide the read-only flag to it. This can be very awesome when it comes to forensics acquisition.
To mount any NAS via SMB:
mount_smbfs afp://<username>@<NAS_IP>/<Share_for_backup> /<mountpoint>
To mount a Time Capsule share via AFP:
mount_afp afp://any_username:password@<Time_Capsule_IP>/<Share_for_backup> /<mountpoint>
And finally this command should do the job:
hdiutil attach test.sparsebundle -readonly
It is nice that you can provide read-only parameter.
If the backup was encrypted and you don't want to provide the password in a password prompt, use the following:
printf '%s' 'CorrectHorseBatteryStaple' | hdiutil attach test.sparsebundle -stdinpass -readonly
Note: if you receive the error "resource temporarily unavailable", probably another machine is backing up to the device
And now, you can find your backup disk under /Volumes. Happy restoring!
Probably it would have been quicker to either enable the remote GUI, or to physically travel to the system and login locally, but that would spoil the fun.
Related links
- Hacker Tools 2019
- Hack Tools For Pc
- Hacking Tools For Games
- Hacking Tools Windows
- Beginner Hacker Tools
- Hacking Tools Name
- Termux Hacking Tools 2019
- Hacker Tools 2020
- Hacking Tools Download
- Ethical Hacker Tools
- Install Pentest Tools Ubuntu
- Hacking Tools 2019
- Hacking Tools
- Nsa Hacker Tools
- Hack And Tools
- Growth Hacker Tools
- Hacking Tools Free Download
- Termux Hacking Tools 2019
- Pentest Tools Port Scanner
- Hacker Tools
- Growth Hacker Tools
- Hacking Tools And Software
- Usb Pentest Tools
- Hacker Tools Apk Download
- Install Pentest Tools Ubuntu
- Easy Hack Tools
- Hack Apps
- Best Hacking Tools 2020
- Hack And Tools
- Hack Tools
- Hacker Tool Kit
- Hack Tool Apk
- Hacking Tools For Windows Free Download
- Hack Tools For Ubuntu
- Hacking Tools For Windows
- Pentest Tools Linux
- Pentest Tools Online
- What Are Hacking Tools
- New Hack Tools
- Hacker Tools 2020
- Pentest Tools Apk
- Pentest Tools Port Scanner
- New Hack Tools
- Hacking Tools Kit
- Hacking Tools 2019
- Hacker Tools Windows
- Best Pentesting Tools 2018
- Pentest Tools Bluekeep
- Hacker Tool Kit
- Hacker Tools Hardware
- Hackers Toolbox
- Usb Pentest Tools
- Nsa Hack Tools
- Hack Tools Download
- Hacking Tools Windows 10
- Hacker Tool Kit
- Hacking Tools Software
- Tools For Hacker
- Hacker Tools For Ios
- Pentest Tools Open Source
- Hacking Tools
- Hacking Tools Hardware
- Hacking Tools For Windows Free Download
- Hacker Tools For Ios
- Hacking Tools Kit
- Pentest Tools Android
- Hacker Tools For Pc
- Hack Tools For Pc
- New Hack Tools
- Hacking Tools For Games
- Hacker Hardware Tools
- Pentest Tools Find Subdomains
- Pentest Box Tools Download
- Hack Tools Online
- What Are Hacking Tools
- Hacking Tools For Pc
- Hacker Tools Free Download
- Hacker Tools
- Termux Hacking Tools 2019
- How To Hack
- Hacking Tools 2019
- Pentest Tools Nmap
- Kik Hack Tools
- Hacker Tools Github
- Hacking Tools Windows 10
- Hacker Tools Software
- Hacking Tools Usb
- Pentest Recon Tools
- Pentest Tools Android
- Hacking Tools For Windows 7
- Termux Hacking Tools 2019
- Hacking Tools For Windows
- Hacker Security Tools
- Nsa Hacker Tools
- Hack Tools For Ubuntu
- Hacker Tools 2019
- Hack Rom Tools
- Hacking Tools Pc
- Hacking Tools Pc
- Hacker Tools 2019
- Hack Rom Tools
- Hacker Search Tools
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Online
- Hack Tools For Mac
- Hacker Hardware Tools
- Hack Tools 2019
- How To Make Hacking Tools
- Hacker Tool Kit
- Hak5 Tools
- What Is Hacking Tools
- Game Hacking
- Hack Tools Github
- Hacking Tools Windows
- Hacker Tools Hardware
- Hacker Tools Online
- Hacker Tools Free Download
- World No 1 Hacker Software
- Pentest Tools Windows
- Top Pentest Tools
- Pentest Tools
- Hacking Tools Windows 10
- Pentest Box Tools Download
- Hacker Tools 2019
- Pentest Tools List
- Tools For Hacker
- Install Pentest Tools Ubuntu
- Hack Tools
- Tools For Hacker
- Pentest Box Tools Download
- Hacking Tools For Kali Linux
- Hacking App
- Ethical Hacker Tools
- Best Pentesting Tools 2018
- Hacking Tools For Beginners
- Hacker Security Tools
- Underground Hacker Sites
- Pentest Tools Download
- Hacker Tools For Ios
- Beginner Hacker Tools
- Hacking Tools Online
- Pentest Tools For Android
- Hacker Security Tools
- Hack Tools For Games
- Pentest Tools Nmap
- How To Hack
- Hack Tools For Mac
- Hacking Tools For Pc
- Hacking Tools For Windows Free Download
- Hacking Tools Hardware
- Hack Tools
- Hacking Tools Github
- Hacker Tools Software
- Hack App
- Hacking Tools Windows
- Blackhat Hacker Tools
- Hacker Tools Software
- Pentest Tools Url Fuzzer
- Hack Tool Apk
- Hacker Security Tools
- Hacker Tools Windows
0 comments on "Recovering Data From An Old Encrypted Time Machine Backup"