Skip to main content

A tool to parse Firefox and Chrome HSTS databases into forensic artifacts.

Project description

HSTS Parser

Build Status Release Status Licence Python 3.8.x PyPI

HSTS Parser is a simple tool to parse Firefox and Chrome's HSTS databases into actually helpful forensic artifacts! You can read more about the research behind this tool and potential uses for it over on my blog!

Installation

HSTS Parser can be installed via pip, or with Poetry.

From PyPi

pip install hstsparser

Poetry (Linux)

curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
poetry install --no-dev

Poetry (Windows)

(Invoke-WebRequest -Uri https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py -UseBasicParsing).Content | python
poetry install --no-dev

Alternatively, if you're using Windows, you can use the executables on the releases page to not need to install anything at all.

Usage

All of the below documentation is written for the Python version rather than the standalone executable, but the commands will be the same.

$ hstsparser -h
usage: hstsparser [-h] [-w WORDLIST] [--csv CSV] (--firefox | --chrome) FILE

Process HSTS databases

positional arguments:
  FILE         The path to the database to be processed

optional arguments:
  -h, --help   show this help message and exit
  -w WORDLIST  The path to the database to be processed
  --csv CSV    Output to a CSV file
  --firefox    Process a Firefox database
  --chrome     Process a Chrome database

Examples

Firefox

hstsparser --firefox SiteSecurityServiceState.txt

Chrome

hstsparser --chrome TransportSecurity

Chrome with Wordlist

hstsparser -w wordlist.txt --chrome TransportSecurity

Screenshots

Firefox

Screenshot of Firefox Processing

Chrome with Wordlist

Screenshot of Chrome Processing with a wordlist

Links

Project details


Release history Release notifications

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for hstsparser, version 1.1.4
Filename, size File type Python version Upload date Hashes
Filename, size hstsparser-1.1.4-py3-none-any.whl (5.3 kB) File type Wheel Python version py3 Upload date Hashes View hashes
Filename, size hstsparser-1.1.4.tar.gz (5.5 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page