How To Recover Data From Firefox Browser

[TheStrength]

TOP FIREFOX BROWSER FORENSICS TOOLS

Dumpzilla application is developed in Python 3.x and has as purpose extract all forensic interesting information of Firefox, Iceweasel, and Seamonkey browsers to be analyzed. Due to its Python 3.x development, it might not work properly in old Python versions, mainly with certain characters. Works under Unix and Windows 32/64 bits systems. Works in command line interface, so information dumps could be redirected by pipes with tools such as grep, awk, cut, sed etc. Dumpzilla allows visualizing following sections, searching customization and extracting certain content.

• Cookies + DOM Storage (HTML 5).
• User preferences (Domain permissions, Proxy settings…).
• Downloads.
• Web forms (Searches, emails, comments.)
• Historial.
• Bookmarks.
• Cache HTML5 Visualization / Extraction (Offline cache).
• Visited sites “thumbnails” Visualization / Extraction.
• Addons / Extensions and used paths or urls.
• Browser saved passwords.
• SSL Certificates added as a exception.
• Session data (Webs, reference URLs and text used in forms).
• Visualize live user surfing, Url used in each tab/window, and use of forms.

It will show SHA256 hash of each file to extract the information and finally a summary with totals.
Sections which date filter is not possible: DOM Storage, Permissions / Preferences, Addons, Extensions, Passwords/Exceptions, Thumbnails and Session

Firefed is a command-line tool to inspect Firefox profiles. It can extract saved passwords, preferences, add-ons, history, and more. You may use it for forensic analysis, to audit your config for insecure settings or just too quickly extract some data without starting up the browser.

FoxAnalysis is a web browser forensics tool developed by Foxton Software Limited that helps with retrieving recorded bookmarks, cookies, downloads, form histories, web histories, logins, saved sessions, and website visits within the Firefox browser. All of these are equally important data for forensics investigations. Some of the features it provides are web history timeline and analysis, filtering, create and open case files, exporting and reporting, etc

PasswordFox gives the investigators the privilege of retrieving the login credentials saved by the Firefox browser. The program is developed by Nir Sofer, which introduced it as a portable program. It does not need to be installed and can also be transported via portable devices. PasswordFox retrieves the records related to the current user profile by default. However, any location can be given which selects any other Firefox user profile. The application allows you to extract the information specifically related to the website, user name, password, user name field, password field, sign-on file, HTTP realm, password strength, and Firefox version. Another feature of the application is that the list of the records can be exported to a TXT, HTML, XML or KeePass CSV file

Browser History Examiner is also one of the products of Foxton Software Limited. It is a browser forensic tool used for capturing, extracting, and analyzing the web browsing history data of the Firefox web browser. It stores logs of bookmarks, cached data, cookies, downloads, favicons, form history, web searches, website visits, login credentials, etc., which are almost all the types of data relevant for web browser forensics investigation.

MZ History Viewer is a simple web browser forensic tool to view the browsing history of the Firefox browser. It provides the user with several simple features. These features include displaying the browsing history in a grid view with columns for First Visit time, Last visit time, Visit Count, Url, Visit Length, etc., searching the history, properties window, navigating to the displayed history urls, and reporting, etc.

MZCookiesView is an alternative to the standard ‘Cookie Manager’ provided by Firefox and Mozilla browsers. It displays the details of all cookies stored inside the cookies file (cookies.txt or cookies.sqlite) in one table and allows you to save the cookies list into text, HTML or XML file, delete unwanted cookies, and backup/restore the cookies file.

MZCacheView is a small utility that reads the cache folder of Firefox/Mozilla/Netscape Web browsers and displays the list of all files currently stored in the cache. For each cache file, the following information is displayed: URL, Content type, File size, Last modified time, Last fetched time, Expiration time, Fetch count, Server name, and more.
You can easily select one or more items from the cache list, and then extract the files to another folder, or copy the URLs list to the clipboard.

Net Analysis v2 is a web browser forensic application that allows the user to retrieve the logged web browsing history and perform forensic analysis on it. Digital Detective Group Ltd introduced this application along with HstEx v4 which is an advanced data recovery solution designed to recover deleted browser history and other browsing data. The Net Analysis tool provides the features of web browser forensics, filtering and searching, cache export and page rebuilding, and reporting, all of which are meant to be useful for digital forensic analysis and investigation.

Source: hackernewsdog