dissect.target.plugins.browsers.browser#

Module Contents#

Classes#

BrowserPlugin

General browser plugin.

Functions#

try_idna

Attributes#

GENERIC_HISTORY_RECORD_FIELDS

BrowserHistoryRecord

dissect.target.plugins.browsers.browser.GENERIC_HISTORY_RECORD_FIELDS = [('datetime', 'ts'), ('string', 'browser'), ('string', 'id'), ('uri', 'url'), ('string',...#
dissect.target.plugins.browsers.browser.BrowserHistoryRecord#
class dissect.target.plugins.browsers.browser.BrowserPlugin(target)#

Bases: dissect.target.plugin.Plugin

General browser plugin.

This plugin groups the functions of all browser plugins. For example, instead of having to run both firefox.history and chrome.history, you only have to run browser.history to get output from both browsers.

__namespace__ = 'browser'#
BROWSERS = ['chrome', 'chromium', 'edge', 'firefox', 'iexplore']#
check_compatible()#

Perform a compatibility check with the target.

This function should return None if the plugin is compatible with the current target (self.target). For example, check if a certain file exists. Otherwise it should raise an UnsupportedPluginError.

Raises:

UnsupportedPluginError – If the plugin could not be loaded.

history()#

Return browser history records from all browsers installed.

Historical browser records for Chrome, Chromium, Edge (Chromium), Firefox, and Internet Explorer are returned.

Yields BrowserHistoryRecords with the following fields:

hostname (string): The target hostname. domain (string): The target domain. ts (datetime): Visit timestamp. browser (string): The browser from which the records are generated from. id (string): Record ID. url (uri): History URL. title (string): Page title. description (string): Page description. rev_host (string): Reverse hostname. visit_type (varint): Visit type. visit_count (varint): Amount of visits. hidden (string): Hidden value. typed (string): Typed value. session (varint): Session value. from_visit (varint): Record ID of the “from” visit. from_url (uri): URL of the “from” visit. source: (path): The source file of the history record.

dissect.target.plugins.browsers.browser.try_idna(s)#