hindsight
Web browser forensics for Google Chrome/Chromium (by obsidianforensics)
chrome_password_grabber
Get unencrypted 'Saved Password' from Google Chrome (by priyankchheda)
| hindsight | chrome_password_grabber | |
|---|---|---|
| 8 | 2 | |
| 1,014 | 717 | |
| - | - | |
| 5.3 | 0.0 | |
| about 1 month ago | 7 months ago | |
| Python | Python | |
| Apache License 2.0 | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
hindsight
Posts with mentions or reviews of hindsight.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-01-18.
-
Saving cached telegram messages from Edge
I guess it would work like any Chromium cache so first make a backup of your data %AppData%\Local\Microsoft\Edge\User Data\Default\ and use https://github.com/obsidianforensics/hindsight Telegram is encrypted so I don't know how this is going to be readable.
- Browser Login Data Dates Earlier than Laptop Date
- Lost/Erased Monsters in Vault Recovered - Chrome - GiffyGlyph's Monster Maker
-
QQT Browser History in CS for Detections at LEAST !?!? WIP ;)
Invoke-WebRequest -Uri "https://github.com/obsidianforensics/hindsight/releases/download/v2021.12/hindsight.exe" -OutFile "C:\windows\Temp\ftech_temp\hindsight.exe"
-
Forensic Tools for Browser Data
Try hindsight https://github.com/obsidianforensics/hindsight. If it fails due to the file being damaged try sqlitebrowser https://sqlitebrowser.org/dl/. If all else fails strings it!
- Forensic script ideas?
-
Evidence/ artifact for clearing chrome history?
There is a tool called Hightsight which used to pull this data out. Article about using it here. Although the emphasis is on used to pull this out. I haven't used that technique in years and I suspect it might not work on modern Chrome.
-
Help reading Chrome History file from 2010
Hindsight (https://github.com/obsidianforensics/hindsight) should be able to parse every version of Chrome, including the early ones (2009/2010).
chrome_password_grabber
Posts with mentions or reviews of chrome_password_grabber.
We have used some of these posts to build our list of alternatives
and similar projects.
- How can it be that money was stolen from my ledger without my consent?
-
Beating a key logger
Sure, but many (such as chrome) use a predefined key. I can confirm that the repo https://github.com/priyankchheda/chrome_password_grabber has a working method of doing it, and more info on this.
What are some alternatives?
When comparing hindsight and chrome_password_grabber you can also consider the following projects:
timesketch - Collaborative forensic timeline analysis
Instagram-Like-Comment-Bot - 📷 An Instagram bot written in Python using Selenium on Google Chrome. It will go through posts in hashtag(s) and like and comment on them.
Sending your docker logs - Sending logs from docker containers to Logit.io
chromium-vim - Vim bindings for Google Chrome.
RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.
Blank-Grabber - The most powerful stealer written in Python 3 and packed with a lot of features.
Logstash - Logstash - transport and process your logs, events, or other data
Mac-Set-Default-Apps - A utility to change default applications in macOS
woanware.github.io
hindsight vs timesketch
chrome_password_grabber vs Instagram-Like-Comment-Bot
hindsight vs Sending your docker logs
chrome_password_grabber vs chromium-vim
hindsight vs RELY
chrome_password_grabber vs Blank-Grabber
hindsight vs Logstash
chrome_password_grabber vs Mac-Set-Default-Apps
hindsight vs woanware.github.io