dfindexeddb is an experimental Python tool for performing digital forensic analysis of IndexedDB and leveldb files.
Project description
dfIndexeddb
dfindexeddb is an experimental Python tool for performing digital forensic analysis of IndexedDB and leveldb files.
It parses leveldb, IndexedDB and javascript structures from these files without requiring native libraries.
The content of IndexedDB files is dependent on what a web application stores locally/offline using the web browser's IndexedDB API. Examples of content might include:
- text from a text/source-code editor application,
- emails and contact information from an e-mail application,
- images and metadata from a photo gallery application
Installation from source
Linux
- Install the snappy compression development package
$ sudo apt install libsnappy-dev
-
Clone or download the repository to your local machine.
-
Create a virutal environemnt and install the package
$ python3 -m venv .venv
$ source .venv/bin/activate
$ pip install .
Tools
This repository contains a number of scripts which demonstrate how one can use
this library. To run these tools, please install the click
python package.
tools/indexeddb_dump.py
- parses structures from an IndexedDB and prints them to standard output.- Optionally, you can also install the
leveldb
python package if you would prefer to use a native leveldb library instead of the leveldb parser in this repository.
- Optionally, you can also install the
tools/ldb_dump.py
- parses structures from a LevelDB .ldb file and prints them to standard output.tools/log_dump.py
- parses structures from a LevelDB .log file and prints them to standard output.
$ pip install click leveldb
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
File details
Details for the file dfindexeddb-20240225.tar.gz
.
File metadata
- Download URL: dfindexeddb-20240225.tar.gz
- Upload date:
- Size: 31.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/4.0.2 CPython/3.11.8
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | c11ce1855acb5739a4bb3d906d6b814664453046938cc8bc59ddafbccf2e9a2a |
|
MD5 | 91acdffe282851b1aacd071e32192562 |
|
BLAKE2b-256 | fd27d99d9707c63e41db0cad4fcf1a43e400f3f638a0d4c55ca1d5c9ee3089a6 |
Provenance
File details
Details for the file dfindexeddb-20240225-py3-none-any.whl
.
File metadata
- Download URL: dfindexeddb-20240225-py3-none-any.whl
- Upload date:
- Size: 37.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/4.0.2 CPython/3.11.8
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | ed15df5ed3f9188d4064a23c830a6f1226030221563d2536b8dc1fd902ed1b03 |
|
MD5 | 46cad78c0ae83931d6d0e7d950f78dea |
|
BLAKE2b-256 | 3847b054956a7a687765e26a6123fdbe8a4426f5b9e5b020a74908863782bc2c |