dissect.target.plugins.apps.browser.chromium#

Module Contents#

Classes#

ChromiumMixin

Mixin class with methods for Chromium-based browsers.

ChromiumPlugin

Chromium browser plugin.

Attributes#

dissect.target.plugins.apps.browser.chromium.CHROMIUM_DOWNLOAD_RECORD_FIELDS = [('uri', 'tab_url'), ('uri', 'tab_referrer_url'), ('string', 'mime_type')]#
class dissect.target.plugins.apps.browser.chromium.ChromiumMixin#

Mixin class with methods for Chromium-based browsers.

DIRS = []#
BrowserDownloadRecord#
BrowserExtensionRecord#
BrowserHistoryRecord#
check_compatible() None#
downloads(browser_name: str = None) Iterator[BrowserDownloadRecord]#

Return browser download records from supported Chromium-based browsers.

Parameters:

browser_name – The name of the browser as a string.

Yields:

Records with the following fields – hostname (string): The target hostname. domain (string): The target domain. ts_start (datetime): Download start timestamp. ts_end (datetime): Download end timestamp. browser (string): The browser from which the records are generated from. id (string): Record ID. path (string): Download path. url (uri): Download URL. tab_url (string): Tab URL. tab_referrer_url (string): Referrer URL. size (varint): Download file size. mime_type (string): MIME type. state (varint): Download state number. source: (path): The source file of the download record.

Raises:

SQLError – If the history file could not be processed.

extensions(browser_name: str = None) Iterator[BrowserExtensionRecord]#

Iterates over all installed extensions for a given browser.

Parameters:

browser_name (-) – Name of the browser to scan for extensions.

Yields:

- Iterator[BrowserExtensionRecord]

A generator that yields BrowserExtensionRecord
with the following fields:

hostname (string): The target hostname. domain (string): The target domain. ts_install (datetime): Extension install timestamp. ts_update (datetime): Extension update timestamp. browser (string): The browser from which the records are generated. id (string): Extension unique identifier. name (string): Name of the extension. short_name (string): Short name of the extension. default_title (string): Default title of the extension. description (string): Description of the extension. version (string): Version of the extension. ext_path (path): Relative path of the extension. from_webstore (boolean): Extension from webstore. permissions (string[]): Permissions of the extension. manifest (varint): Version of the extensions’ manifest. source: (path): The source file of the download record.

history(browser_name: str = None) Iterator[BrowserHistoryRecord]#

Return browser history records from supported Chromium-based browsers.

Parameters:

browser_name – The name of the browser as a string.

Yields:

Records with the following fields – hostname (string): The target hostname. domain (string): The target domain. ts (datetime): Visit timestamp. browser (string): The browser from which the records are generated from. id (string): Record ID. url (uri): History URL. title (string): Page title. description (string): Page description. rev_host (string): Reverse hostname. visit_type (varint): Visit type. visit_count (varint): Amount of visits. hidden (string): Hidden value. typed (string): Typed value. session (varint): Session value. from_visit (varint): Record ID of the “from” visit. from_url (uri): URL of the “from” visit. source: (path): The source file of the history record.

Raises:

SQLError – If the history file could not be processed.

class dissect.target.plugins.apps.browser.chromium.ChromiumPlugin(target: dissect.target.Target)#

Bases: ChromiumMixin, dissect.target.plugins.apps.browser.browser.BrowserPlugin

Chromium browser plugin.

__namespace__ = 'chromium'#
DIRS = ['.config/chromium/Default', '.var/app/org.chromium.Chromium/config/chromium/Default',...#
downloads()#

Return browser download records for Chromium browser.

extensions()#

Return browser extension records for Chromium browser.

history()#

Return browser history records for Chromium browser.