首页 > 其他 > 详细

Recover damage pictures to see the crime scene

时间:2015-08-09 10:46:26      阅读:348      评论:0      收藏:0      [点我收藏+]

Few people know that when you take photos there is also a thumbnail embeded inside the file, even some forensic guys may have no idea about this important clue. That means if you see a damaged photo, you could try to extract the thumbnail inside the photo, thus you could see it clearly. Let me show you how to do it manually with Winhex.

1. A damaged photo, some part of it is missing, so we could not see the face of our suspect clearly...

技术分享

 

2.Open it with Winhex, and search hex value "FFD8FF" which means the file header of JPGs. There are two hits, and the second one is the header of thumbnamil we‘re looking for.

技术分享

 

3. Go to the second hit and mark it as the begining of block.

技术分享

 

4.Search hex value "FFD9" which means the footer of JPGs and go to the footer of thumbnail we‘re looking for. Also mark it as the end of block. 

技术分享

 

5. Now we could copy this block into a new file.

技术分享

 

6. That‘s it. Now you could see the face of our suspect, including the weapon on his/her hans and viechle...

技术分享

 

7. Of course some tools could do this for you, still you have to know why and how and take it into practice.

 

Recover damage pictures to see the crime scene

原文:http://www.cnblogs.com/pieces0310/p/4714645.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!