semvec/pypi-packages huggingface dataset:
firefox-forensics 1.0.1b0
Read data from Firefox browser and extract useful information.
License: MIT

# firefox-forensics

![Static Badge](https://img.shields.io/badge/python-3.13-blue)
![Static Badge](https://img.shields.io/badge/python-3.14-blue)
![GitHub License](https://img.shields.io/github/license/niftycode/firefox-forensics)
![](https://img.shields.io/github/issues/niftycode/firefox-forensics.svg?style=flat)
![](https://img.shields.io/pypi/v/firefox-forensics)
![GitHub last commit](https://img.shields.io/github/last-commit/niftycode/firefox-forensics)

This is a simple forensic tool written in Python. Use this tool to fetch the content (id, url, date of last visit) from the `places.sqlite` database file of the Firefox browser on macOS.

## Background

Firefox stores a variety of data in a directory called "Profiles." This directory also contains the `places.sqlite` database, which holds the browsing history. This program copies the `places.sqlite` database to the Desktop. Then it opens the database and reads the `moz_places` table. Three entries are displayed in the Terminal: the ID, the visited website, and the date.

## Requirements

* Python 3.13+ (It will probably work with other versions too, but I haven't tested it.)
* macOS

## Install

    pip3 install firefox-forensics

## Usage

To display the ID, the visited website, and the date in the terminal, execute the following command:

    firefox-forensics -w

If this data should also be saved in a text file on the desktop, the option `-o` must be added:

    firefox-forensics -o

This program does not read the original database (`places.sqlite`), but first creates a copy on the desktop. The data is then read from this copied database.

## Changelog

see [Changelog.md](https://github.com/niftycode/firefox-forensics/blob/main/Changelog.md)