dissect.target.plugins.browsers.browser
#
Module Contents#
Classes#
General browser plugin. |
Functions#
Attributes#
- dissect.target.plugins.browsers.browser.GENERIC_HISTORY_RECORD_FIELDS = [('datetime', 'ts'), ('string', 'browser'), ('string', 'id'), ('uri', 'url'), ('string',...#
- dissect.target.plugins.browsers.browser.BrowserHistoryRecord#
- class dissect.target.plugins.browsers.browser.BrowserPlugin(target)#
Bases:
dissect.target.plugin.Plugin
General browser plugin.
This plugin groups the functions of all browser plugins. For example, instead of having to run both firefox.history and chrome.history, you only have to run browser.history to get output from both browsers.
- __namespace__ = 'browser'#
- BROWSERS = ['chrome', 'chromium', 'edge', 'firefox', 'iexplore']#
- check_compatible()#
Perform a compatibility check with the target.
This function should return
None
if the plugin is compatible with the current target (self.target
). For example, check if a certain file exists. Otherwise it should raise anUnsupportedPluginError
.- Raises:
UnsupportedPluginError – If the plugin could not be loaded.
- history()#
Return browser history records from all browsers installed.
Historical browser records for Chrome, Chromium, Edge (Chromium), Firefox, and Internet Explorer are returned.
- Yields BrowserHistoryRecords with the following fields:
hostname (string): The target hostname. domain (string): The target domain. ts (datetime): Visit timestamp. browser (string): The browser from which the records are generated from. id (string): Record ID. url (uri): History URL. title (string): Page title. description (string): Page description. rev_host (string): Reverse hostname. visit_type (varint): Visit type. visit_count (varint): Amount of visits. hidden (string): Hidden value. typed (string): Typed value. session (varint): Session value. from_visit (varint): Record ID of the “from” visit. from_url (uri): URL of the “from” visit. source: (path): The source file of the history record.
- dissect.target.plugins.browsers.browser.try_idna(s)#