A tool to parse Firefox and Chrome HSTS databases into forensic artifacts.
Project description
HSTS Parser
HSTS Parser is a simple tool to parse Firefox and Chrome's HSTS databases into actually helpful forensic artifacts! You can read more about the research behind this tool and potential uses for it over on my blog!
Installation
HSTS Parser can be installed via pip, or with Poetry.
From PyPi
pip install hstsparser
Poetry (Linux)
curl -sSL https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py | python
poetry install --no-dev
Poetry (Windows)
(Invoke-WebRequest -Uri https://raw.githubusercontent.com/python-poetry/poetry/master/get-poetry.py -UseBasicParsing).Content | python
poetry install --no-dev
Alternatively, if you're using Windows, you can use the executables on the releases page to not need to install anything at all.
Usage
All of the below documentation is written for the Python version rather than the standalone executable, but the commands will be the same.
$ hstsparser -h
usage: hstsparser [-h] [-w WORDLIST] [--csv CSV] (--firefox | --chrome) FILE
Process HSTS databases
positional arguments:
FILE The path to the database to be processed
optional arguments:
-h, --help show this help message and exit
-w WORDLIST The path to the database to be processed
--csv CSV Output to a CSV file
--firefox Process a Firefox database
--chrome Process a Chrome database
Examples
Firefox
hstsparser --firefox SiteSecurityServiceState.txt
Chrome
hstsparser --chrome TransportSecurity
Chrome with Wordlist
hstsparser -w wordlist.txt --chrome TransportSecurity
Screenshots
Firefox
Chrome with Wordlist
Links
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
hstsparser-1.1.4.tar.gz
(5.5 kB
view hashes)
Built Distribution
Close
Hashes for hstsparser-1.1.4-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 827acef264d13b6f6153c970a47e8dc02b0a55862f4c79829724b3cac477e46f |
|
MD5 | f066e1b570deeabda52ede7cfe351d6d |
|
BLAKE2b-256 | 8caf6af5be553d35cfcc9af0a71b6b0f7f3421cd12d9bf1ef7fd88fc9994576a |