dfindexeddb 20240519__py3-none-any.whl → 20241105__py3-none-any.whl

dfindexeddb/leveldb/descriptor.py

@@ -41,7 +41,10 @@ class InternalKey:
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0) -> InternalKey:
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
+  ) -> InternalKey:
     """Decodes an InternalKey from the current position of a LevelDBDecoder.
 
     Args:
@@ -91,7 +94,10 @@ class NewFile(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0) -> NewFile:
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
+  ) -> NewFile:
     """Decodes a NewFile from the current position of a LevelDBDecoder.
 
     Args:
@@ -131,7 +137,9 @@ class CompactPointer(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
   ) -> CompactPointer:
     """Decodes a CompactPointer from the current position of a LevelDBDecoder.
 
@@ -162,7 +170,10 @@ class DeletedFile(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0) -> DeletedFile:
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
+  ) -> DeletedFile:
     """Decodes a DeletedFile from the current position of a LevelDBDecoder.
 
     Args:
@@ -204,7 +215,10 @@ class VersionEdit(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0) -> VersionEdit:
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
+  ) -> VersionEdit:
     """Decodes a VersionEdit from the current position of a LevelDBDecoder.
 
     Args:
@@ -332,6 +346,7 @@ class FileReader:
       VersionEdit
     """
     buffer = bytearray()
+    offset = None
     for physical_record in self.GetPhysicalRecords():
       if (physical_record.record_type ==
           definitions.LogFilePhysicalRecordType.FULL):
@@ -382,7 +397,9 @@ class FileReader:
           version_edit_offset=version_edit.offset,
           last_sequence=version_edit.last_sequence)
 
-  def GetLatestVersion(self) -> LevelDBVersion:
+  def GetLatestVersion(self) -> Optional[LevelDBVersion]:
     """Returns the latest LevelDBVersion instance."""
-    *_, latest = self.GetVersions()
+    latest = None
+    for version in self.GetVersions():
+      latest = version
     return latest

dfindexeddb/leveldb/ldb.py

@@ -46,7 +46,10 @@ class KeyValueRecord:
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, block_offset: int, shared_key: bytes
+      cls,
+      decoder: utils.LevelDBDecoder,
+      block_offset: int,
+      shared_key: bytes
   ) -> Tuple[KeyValueRecord, bytes]:
     """Decodes a ldb key value record.
 
@@ -259,4 +262,4 @@ class FileReader:
       A tuple of key and value as bytes.
     """
     for record in self.GetKeyValueRecords():
-      yield (record.key, record.value)
+      yield record.key, record.value

dfindexeddb/leveldb/log.py

@@ -98,7 +98,9 @@ class WriteBatch(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-    cls, decoder: utils.LevelDBDecoder, base_offset: int = 0
+    cls,
+    decoder: utils.LevelDBDecoder,
+    base_offset: int = 0
   ) -> WriteBatch:
     """Parses a WriteBatch from a binary stream.
 
@@ -132,10 +134,11 @@ class PhysicalRecord(utils.FromDecoderMixin):
   """A physical record from a leveldb log file.
 
   Attributes:
-    offset: the record offset.
+    base_offset: the base offset.
     checksum: the record checksum.
     length: the length of the record in bytes.
-    type: the record type.
+    offset: the record offset.
+    record_type: the record type.
     contents: the record contents.
     contents_offset: the offset of where the record contents are stored.
   """
@@ -151,7 +154,9 @@ class PhysicalRecord(utils.FromDecoderMixin):
 
   @classmethod
   def FromDecoder(
-      cls, decoder: utils.LevelDBDecoder, base_offset: int = 0
+      cls,
+      decoder: utils.LevelDBDecoder,
+      base_offset: int = 0
   ) -> Optional[PhysicalRecord]:
     """Decodes a PhysicalRecord from the current position of a LevelDBDecoder.
 
@@ -237,7 +242,7 @@ class FileReader:
   A Log FileReader provides read-only sequential iteration of serialized
   structures in a leveldb logfile.  These structures include:
   * blocks (Block)
-  * phyiscal records (PhysicalRecord)
+  * physical records (PhysicalRecord)
   * batches (WriteBatch) and
   * key/value records (ParsedInternalKey).
 
@@ -288,6 +293,7 @@ class FileReader:
       WriteBatch
     """
     buffer = bytearray()
+    offset = None
     for physical_record in self.GetPhysicalRecords():
       if (physical_record.record_type ==
          definitions.LogFilePhysicalRecordType.FULL):

dfindexeddb/leveldb/plugins/manager.py

@@ -49,8 +49,8 @@ class LeveldbPluginManager:
     """
     try:
       return cls._class_registry[plugin_name]
-    except KeyError:
-      raise KeyError(f'Plugin not found: {plugin_name}')
+    except KeyError as exc:
+      raise KeyError(f'Plugin not found: {plugin_name}') from exc
 
   @classmethod
   def RegisterPlugin(cls, plugin_class: Type[interface.LeveldbPlugin]):

dfindexeddb/utils.py

@@ -213,7 +213,7 @@ T = TypeVar('T')
 
 
 class FromDecoderMixin:
-  """A mixin for parsing dataclass attributes using a LevelDBDecoder."""
+  """A mixin for parsing dataclass attributes using a StreamDecoder."""
 
   @classmethod
   def FromDecoder(
@@ -268,7 +268,7 @@ def asdict(obj, *, dict_factory=dict):  # pylint: disable=invalid-name
   class name under the __type__ attribute name.
   """
   if not dataclasses.is_dataclass(obj):
-    raise TypeError("asdict() should be called on dataclass instances")
+    raise TypeError('asdict() should be called on dataclass instances')
   return _asdict_inner(obj, dict_factory)
 
 

dfindexeddb/version.py

@@ -15,7 +15,7 @@
 """Version information for dfIndexeddb."""
 
 
-__version__ = "20240519"
+__version__ = "20241105"
 
 
 def GetVersion():

{dfindexeddb-20240519.dist-info → dfindexeddb-20241105.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: dfindexeddb
-Version: 20240519
+Version: 20241105
 Summary: dfindexeddb is an experimental Python tool for performing digital forensic analysis of IndexedDB and leveldb files.
 Author-email: Syd Pleno <sydp@google.com>
 Maintainer-email: dfIndexeddb Developers <dfindexeddb-dev@googlegroups.com>
@@ -230,8 +230,7 @@ analysis of IndexedDB and LevelDB files.
 
 It parses LevelDB, IndexedDB and JavaScript structures from these files without
 requiring native libraries.  (Note: only a subset of IndexedDB key types and
-JavaScript types for Safari and Chromium-based browsers are currently supported.
-Firefox is under development).
+JavaScript types for Firefox, Safari and Chromium-based browsers are currently supported).
 
 The content of IndexedDB files is dependent on what a web application stores
 locally/offline using the web browser's
@@ -313,6 +312,13 @@ options:
 
 #### Examples:
 
+To parse IndexedDB records from an sqlite file for Firefox and output the
+results as JSON, use the following command:
+
+```
+dfindexeddb db -s SOURCE --format firefox -o json
+```
+
 To parse IndexedDB records from an sqlite file for Safari and output the
 results as JSON-L, use the following command:
 
@@ -376,7 +382,7 @@ To parse records from a LevelDB folder, use the following command:
 dfleveldb db -s SOURCE
 ```
 
-To parse records from a LevelDB folder, and use the sequence number to 
+To parse records from a LevelDB folder, and use the sequence number to
 determine recovered records and output as JSON, use the
 following command:
 
@@ -409,8 +415,8 @@ $ dfleveldb descriptor -s SOURCE [-o {json,jsonl,repr}] [-t {blocks,physical_rec
 
 #### Plugins
 
-To apply a plugin parser for a leveldb file/folder, add the 
-`--plugin [Plugin Name]` argument.  Currently, there is support for the 
+To apply a plugin parser for a leveldb file/folder, add the
+`--plugin [Plugin Name]` argument.  Currently, there is support for the
 following artifacts:
 
 | Plugin Name | Artifact Name |

dfindexeddb-20241105.dist-info/RECORD

@@ -0,0 +1,41 @@
+dfindexeddb/__init__.py,sha256=KPYL9__l8od6_OyDfGRTgaJ6iy_fqIgZ-dS2S-e3Rac,599
+dfindexeddb/errors.py,sha256=PNpwyf_lrPc4TE77oAakX3mu5D_YcP3f80wq8Y1LkvY,749
+dfindexeddb/utils.py,sha256=_Pee0qy3w6d-SWx59wVTq4PBUBZ1F-DlBkSquLNr3r4,9997
+dfindexeddb/version.py,sha256=NO-YKjHh-Fvil-z8ILAhBuyQ0UHcdHiPVKJwuRbDvvE,751
+dfindexeddb/indexeddb/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
+dfindexeddb/indexeddb/cli.py,sha256=bjSQ0L-sQlYOk7v7_L8_XkrSBLXnPIcEhVfQWrxj6Ws,7533
+dfindexeddb/indexeddb/types.py,sha256=Gx9b9TxDCPoz3Xc8J_NPfDxCLoyX5z_lLcSlO4W433k,1892
+dfindexeddb/indexeddb/utils.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+dfindexeddb/indexeddb/chromium/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
+dfindexeddb/indexeddb/chromium/blink.py,sha256=kwhPfzcWOOxYyXUWfV6f4grQwXzS2ABFaNVMIVhol3c,32268
+dfindexeddb/indexeddb/chromium/definitions.py,sha256=KruZLv3U_93Sc_qedhd6hd9vuRCy6nkovnUtqW6Kz4o,8842
+dfindexeddb/indexeddb/chromium/record.py,sha256=5HAtTTyIgw1gTJBq419Zq0w1aImd3nUkwAZByVCMuaM,48362
+dfindexeddb/indexeddb/chromium/v8.py,sha256=rxvrqhHVww-tLsaqk4P0FJtnLR9FI9lAkgXmigBJW2Y,21557
+dfindexeddb/indexeddb/firefox/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
+dfindexeddb/indexeddb/firefox/definitions.py,sha256=xkvlYaaFR2IDQBGJGnrhVIOUce6VuMq-kWXe2CLX3Aw,4306
+dfindexeddb/indexeddb/firefox/gecko.py,sha256=sPPBYSq3Mnjv_somkrZJx1IRxTMwmgRbBVj7jwuBtXQ,19598
+dfindexeddb/indexeddb/firefox/record.py,sha256=yB7dYiwzCx1c67Sf6ViMSX51SCrcgU8OBUaVYczqTik,5766
+dfindexeddb/indexeddb/safari/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
+dfindexeddb/indexeddb/safari/definitions.py,sha256=zCXF06ugcAmYTDPumL_VqNB-TgnrPfmAyUYz3wsBwmQ,2795
+dfindexeddb/indexeddb/safari/record.py,sha256=bzoMSgpXs2SsEOKHjVh9tkJDZtzGkQByq3G5dK_Yd7Q,8010
+dfindexeddb/indexeddb/safari/webkit.py,sha256=oTZNPVIIIVG7iGyR-aJhvwaenwb1bsFrDZRmFaZRYxs,20481
+dfindexeddb/leveldb/__init__.py,sha256=KPYL9__l8od6_OyDfGRTgaJ6iy_fqIgZ-dS2S-e3Rac,599
+dfindexeddb/leveldb/cli.py,sha256=cuMMJAC1bLR_dL1WT2rrKt7ayqArj_D1Q_7ockYi9wk,9970
+dfindexeddb/leveldb/definitions.py,sha256=lPW_kjc47vyoGOoEWfgWvKcpGbN-0h7XXwCeMoFmYKk,1486
+dfindexeddb/leveldb/descriptor.py,sha256=5P-dCLp0qDNHrRbCF9yvuUj1u0B_KhQEVAWfuRwe0Wo,12355
+dfindexeddb/leveldb/ldb.py,sha256=R6wQN5r0h_BpdFvZ2mIsz6rRNWU_2JozeQdl4uRuOBk,8103
+dfindexeddb/leveldb/log.py,sha256=YtXqwy_qrA2_PDG-119oHQkDykXNn6TG4Vr285dTWgo,9480
+dfindexeddb/leveldb/record.py,sha256=j7ZnU6VDVcYVpJRGFRb5Sr2edhC3aGp3U0kPNcoZgng,11912
+dfindexeddb/leveldb/utils.py,sha256=RgEEZ7Z35m3CcOUypAiViQSzKjBgSXZ3aeJhQjY3H9w,3748
+dfindexeddb/leveldb/plugins/__init__.py,sha256=RoC6tRkq8FhqIaFs6jwu1fao_qaSvlSfIFxQVjWregI,690
+dfindexeddb/leveldb/plugins/chrome_notifications.py,sha256=-dyb_AJbUPE2wPJg_Y1Ns5CMtg4udi9Fqo5WKh6f3Z4,5354
+dfindexeddb/leveldb/plugins/interface.py,sha256=QlNEvVvU8K9ChE2kblM97cOvXwvmCh9NuSf2b6WwezQ,1257
+dfindexeddb/leveldb/plugins/manager.py,sha256=Slcj3l3E4ObDdaZeylUv7NldgWgYv6AMgsNl8vanDTc,2155
+dfindexeddb/leveldb/plugins/notification_database_data_pb2.py,sha256=DCPZHbyq2szLgrBprOKrJKycKJma8Z_SnAQM6Jx9bZg,4389
+dfindexeddb-20241105.dist-info/AUTHORS,sha256=QbvjbAom57fpEkekkCVFUj0B9KUMGraR510aUMBC-PE,286
+dfindexeddb-20241105.dist-info/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+dfindexeddb-20241105.dist-info/METADATA,sha256=rMt3-NhkLi4FW2KOEBn6O5nfrKxVNmNV1nNIBPR5c2U,18972
+dfindexeddb-20241105.dist-info/WHEEL,sha256=P9jw-gEje8ByB7_hXoICnHtVCrEwMQh-630tKvQWehc,91
+dfindexeddb-20241105.dist-info/entry_points.txt,sha256=WG9YNLZ9lBx4Q9QF6wS4dZdZfADT3Zs4_-MV5TcA0ls,102
+dfindexeddb-20241105.dist-info/top_level.txt,sha256=X9OTaub1c8S_JJ7g-f8JdkhhdiZ4x1j4eni1hdUCwE4,12
+dfindexeddb-20241105.dist-info/RECORD,,

{dfindexeddb-20240519.dist-info → dfindexeddb-20241105.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: bdist_wheel (0.43.0)
+Generator: setuptools (75.3.0)
 Root-Is-Purelib: true
 Tag: py3-none-any
 

dfindexeddb-20240519.dist-info/RECORD

@@ -1,37 +0,0 @@
-dfindexeddb/__init__.py,sha256=KPYL9__l8od6_OyDfGRTgaJ6iy_fqIgZ-dS2S-e3Rac,599
-dfindexeddb/errors.py,sha256=PNpwyf_lrPc4TE77oAakX3mu5D_YcP3f80wq8Y1LkvY,749
-dfindexeddb/utils.py,sha256=NEqnBNgAmSrZ7iwhEZx8PYlDrT8c-NnTLbm86ZLsOsc,9998
-dfindexeddb/version.py,sha256=PzaqD9kWSx3q6RDQLgClQ7dmnrp2h8nqJcq5jprK2uY,751
-dfindexeddb/indexeddb/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
-dfindexeddb/indexeddb/cli.py,sha256=WeOaQXFZglkI9Mwc97rCnVsCX32Dw0CgMQX3RKutwIA,6339
-dfindexeddb/indexeddb/utils.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-dfindexeddb/indexeddb/chromium/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
-dfindexeddb/indexeddb/chromium/blink.py,sha256=kwhPfzcWOOxYyXUWfV6f4grQwXzS2ABFaNVMIVhol3c,32268
-dfindexeddb/indexeddb/chromium/definitions.py,sha256=1a-AmHVZ95uDB6se_fdarwJR8q0tFMQNh2xrZ2-VxN8,8739
-dfindexeddb/indexeddb/chromium/record.py,sha256=LIuTwwQeQbn6CBXdo0AZZHounOWcnXRg6W082yxmNBo,47578
-dfindexeddb/indexeddb/chromium/v8.py,sha256=NsbMgA6nRcAfdLg6CFwWadwsDS6TJ95-4MrgphaTuLw,22102
-dfindexeddb/indexeddb/firefox/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
-dfindexeddb/indexeddb/safari/__init__.py,sha256=kExXSVBCTKCD5BZJkdMfUMqGksH-DMJxP2_lI0gq-BE,575
-dfindexeddb/indexeddb/safari/definitions.py,sha256=nW8MmYx9Ob86W4pxm4QD4Xvr5QjoV34-U7wDhm2GIr0,2779
-dfindexeddb/indexeddb/safari/record.py,sha256=bzoMSgpXs2SsEOKHjVh9tkJDZtzGkQByq3G5dK_Yd7Q,8010
-dfindexeddb/indexeddb/safari/webkit.py,sha256=SmmwuJKF8NfHCiAaz1Zc1LsVm6IF3bTkaEzi6M0-HdM,21969
-dfindexeddb/leveldb/__init__.py,sha256=KPYL9__l8od6_OyDfGRTgaJ6iy_fqIgZ-dS2S-e3Rac,599
-dfindexeddb/leveldb/cli.py,sha256=e2C94FSP28dh83FWQXD5N44ymUDwkfFeX0Tfk9YLCTo,9913
-dfindexeddb/leveldb/definitions.py,sha256=lPW_kjc47vyoGOoEWfgWvKcpGbN-0h7XXwCeMoFmYKk,1486
-dfindexeddb/leveldb/descriptor.py,sha256=WR3irG16oIE6VbaP9UPnzOD3KlHR8GYFnoeG6ySJUzU,12211
-dfindexeddb/leveldb/ldb.py,sha256=mN-M7PLtE_VLZCbCbzRgjkSezbMUhgDjgWgPgIxJ1jM,8087
-dfindexeddb/leveldb/log.py,sha256=ofw0r2f_3Ll5oHzssvp61nmjhIPdt3tmb9UeNiGLHXk,9401
-dfindexeddb/leveldb/record.py,sha256=j7ZnU6VDVcYVpJRGFRb5Sr2edhC3aGp3U0kPNcoZgng,11912
-dfindexeddb/leveldb/utils.py,sha256=RgEEZ7Z35m3CcOUypAiViQSzKjBgSXZ3aeJhQjY3H9w,3748
-dfindexeddb/leveldb/plugins/__init__.py,sha256=RoC6tRkq8FhqIaFs6jwu1fao_qaSvlSfIFxQVjWregI,690
-dfindexeddb/leveldb/plugins/chrome_notifications.py,sha256=-dyb_AJbUPE2wPJg_Y1Ns5CMtg4udi9Fqo5WKh6f3Z4,5354
-dfindexeddb/leveldb/plugins/interface.py,sha256=QlNEvVvU8K9ChE2kblM97cOvXwvmCh9NuSf2b6WwezQ,1257
-dfindexeddb/leveldb/plugins/manager.py,sha256=jisYyks3OQQQUVACoGcWN81UCGQEa537YvYL7v3CiFs,2139
-dfindexeddb/leveldb/plugins/notification_database_data_pb2.py,sha256=DCPZHbyq2szLgrBprOKrJKycKJma8Z_SnAQM6Jx9bZg,4389
-dfindexeddb-20240519.dist-info/AUTHORS,sha256=QbvjbAom57fpEkekkCVFUj0B9KUMGraR510aUMBC-PE,286
-dfindexeddb-20240519.dist-info/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-dfindexeddb-20240519.dist-info/METADATA,sha256=aDy87_6iqVwvkSI4teKm-Sq8DKb6GHpuydePrZXsydA,18818
-dfindexeddb-20240519.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-dfindexeddb-20240519.dist-info/entry_points.txt,sha256=WG9YNLZ9lBx4Q9QF6wS4dZdZfADT3Zs4_-MV5TcA0ls,102
-dfindexeddb-20240519.dist-info/top_level.txt,sha256=X9OTaub1c8S_JJ7g-f8JdkhhdiZ4x1j4eni1hdUCwE4,12
-dfindexeddb-20240519.dist-info/RECORD,,