adb forward nc dd

备份emmc

{

        dd if=/dev/block/mmcblk0p28 |  busybox nc -l -p 11234

        adb forward tcp:11234 tcp:11234  && nc 127.0.0.1 11234 |dd of=out.img

}

时间格式转换

{        date -d @1287331200 }

查找ext4删除的文件

{        extundelete --inode 2 userdata.img }

查找文件

{

        touch -t 201509232200 201509232200

        touch -t 201509281000 201509281000

        find . -newer /home/firear/Projects/oppo/201509232200 ! -newer /home/firear/Projects/oppo/201509281000 

        find . -type f -newer /home/firear/Projects/oppo/201509232200 ! -newer /home/firear/Projects/oppo/201509281000 -exec tar -rvf         /home/firear/temp/1022/modifyFiles/a.tar {} \;

}

wireshark 抓包

{

        手机：

        tcpdump -n -s0 -w - | busybox nc -l -p 11234

       主机：

       adb forward tcp:11234 tcp:11234 && nc 127.0.0.1 11234 | wireshark -k -S -i -

}