Skip to main content

dfindexeddb is an experimental Python tool for performing digital forensic analysis of IndexedDB and leveldb files.

Project description

dfIndexeddb

dfindexeddb is an experimental Python tool for performing digital forensic analysis of IndexedDB and leveldb files.

It parses leveldb, IndexedDB and javascript structures from these files without requiring native libraries.

The content of IndexedDB files is dependent on what a web application stores locally/offline using the web browser's IndexedDB API. Examples of content might include:

  • text from a text/source-code editor application,
  • emails and contact information from an e-mail application,
  • images and metadata from a photo gallery application

Installation from source

Linux

  1. Install the snappy compression development package
    $ sudo apt install libsnappy-dev
  1. Clone or download the repository to your local machine.

  2. Create a virutal environemnt and install the package

    $ python3 -m venv .venv
    $ source .venv/bin/activate
    $ pip install .

Tools

This repository contains a number of scripts which demonstrate how one can use this library. To run these tools, please install the click python package.

  • tools/indexeddb_dump.py - parses structures from an IndexedDB and prints them to standard output.
    • Optionally, you can also install the leveldb python package if you would prefer to use a native leveldb library instead of the leveldb parser in this repository.
  • tools/ldb_dump.py - parses structures from a LevelDB .ldb file and prints them to standard output.
  • tools/log_dump.py - parses structures from a LevelDB .log file and prints them to standard output.
    $ pip install click leveldb

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

dfindexeddb-20240225.tar.gz (31.3 kB view details)

Uploaded Source

Built Distribution

dfindexeddb-20240225-py3-none-any.whl (37.2 kB view details)

Uploaded Python 3

File details

Details for the file dfindexeddb-20240225.tar.gz.

File metadata

  • Download URL: dfindexeddb-20240225.tar.gz
  • Upload date:
  • Size: 31.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/4.0.2 CPython/3.11.8

File hashes

Hashes for dfindexeddb-20240225.tar.gz
Algorithm Hash digest
SHA256 c11ce1855acb5739a4bb3d906d6b814664453046938cc8bc59ddafbccf2e9a2a
MD5 91acdffe282851b1aacd071e32192562
BLAKE2b-256 fd27d99d9707c63e41db0cad4fcf1a43e400f3f638a0d4c55ca1d5c9ee3089a6

See more details on using hashes here.

Provenance

File details

Details for the file dfindexeddb-20240225-py3-none-any.whl.

File metadata

File hashes

Hashes for dfindexeddb-20240225-py3-none-any.whl
Algorithm Hash digest
SHA256 ed15df5ed3f9188d4064a23c830a6f1226030221563d2536b8dc1fd902ed1b03
MD5 46cad78c0ae83931d6d0e7d950f78dea
BLAKE2b-256 3847b054956a7a687765e26a6123fdbe8a4426f5b9e5b020a74908863782bc2c

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page