Skip to content

Haseeb-1698/SecureBrave

Repository files navigation

PrivacyHack Dashboard & Browser Artifacts Forensics Tool

A comprehensive solution for digital forensics and browser artifact analysis, combining a modern web dashboard with powerful command-line tools for extracting, processing, and visualizing data from privacy-centric browsers like Brave.


πŸš€ Project Overview

PrivacyHack Dashboard is a React + Vite application designed for digital forensics, privacy enthusiasts, and anyone curious about their Brave browser data. It provides a seamless interface to:

  • View and filter CSV data (history, bookmarks, passwords, etc.)
  • Explore raw hex data for advanced analysis
  • Switch between light and dark themes
  • Enjoy a fast, responsive, and visually appealing UI

Browser Artifacts Forensics Tool (CLI/Backend) is a specialized toolkit for extracting, decrypting, and analyzing browser artifacts and Prefetch files, supporting integration into forensic workflows and outputting data in multiple formats.


✨ Features

Web Dashboard

  • Dashboard Home: Quick access to all data types with beautiful cards
  • Theme Toggle: Instantly switch between light and dark modes
  • CSV Viewer:
    • Tabbed navigation for different data types
    • Fast, filterable, scrollable tables with sticky headers
    • Black/green terminal-style table for easy reading
  • Hex Viewer:
    • View raw hex data for all supported files
    • Tabbed navigation and easy scrolling
  • Modern UI: Built with Tailwind CSS, React, and Vite for speed and style

CLI/Forensics Tool

  • Extracts and decrypts browser artifacts:
    • Bookmarks, Browsing history, Local storage, Session storage, Saved passwords
  • Performs Prefetch file analysis for execution patterns
  • Outputs data in CSV and JSON formats
  • Integrates seamlessly into forensic workflows

πŸ“Έ Screenshots

  • Home Page
  • Light Theme Example

πŸ› οΈ Tech Stack

  • Frontend: React, Vite
  • Styling: Tailwind CSS
  • CSV Parsing: PapaParse
  • Routing: React Router
  • Backend/CLI: Go, Python, PECmd

πŸ“‚ Folder Structure

pro/
β”œβ”€β”€ public/
β”‚   β”œβ”€β”€ data/                # CSV and hex data files
β”‚   └── ...
β”œβ”€β”€ src/
β”‚   β”œβ”€β”€ components/          # React components (Home, CSVViewer, Hex)
β”‚   β”œβ”€β”€ assets/              # Static assets
β”‚   β”œβ”€β”€ App.jsx              # Main app entry
β”‚   └── ...
β”œβ”€β”€ index.html
β”œβ”€β”€ package.json
└── README.md

πŸ§‘β€πŸ’» Forensics Tool Documentation

Table of Contents

  1. Introduction
  2. Features
  3. System Requirements
  4. Installation
  5. Usage
  6. Artifact Categories
  7. Workflow
  8. Troubleshooting
  9. Best Practices
  10. Conclusion

Introduction

The Browser Artifacts Forensics Tool is a specialized application designed for digital forensic investigators. It aids in extracting, processing, and analyzing browser artifacts from privacy-centric browsers like Brave. The tool also supports Prefetch file analysis to track program execution patterns, enabling investigators to construct detailed activity timelines.

Features

  • Extracts and decrypts browser artifacts:
    • Bookmarks
    • Browsing history
    • Local storage
    • Session storage
    • Saved passwords
  • Performs Prefetch file analysis for execution patterns.
  • Outputs data in multiple formats:
    • CSV
    • JSON
  • Integrates seamlessly into forensic workflows.

System Requirements

  • Operating System: Windows
  • Dependencies:
    • Go: To run the core application.
    • Python 3.8+: For additional analysis modules.
    • PECmd: For Prefetch file analysis.

Installation

Go Application Setup

  1. Download and Install Go:
  2. Verify Installation:
    • Run: go version
  3. Build the Application:
    • Navigate to the directory containing main.go.
    • Run: go build -o forensic_tool main.go

Python Setup

  1. Download and Install Python:
    • Visit Python's official website and download the latest version.
    • Ensure "Add Python to PATH" is selected during installation.
  2. Verify Installation:
    • Run: python --version
  3. Install Dependencies:
    • Navigate to the directory with requirements.txt.
    • Run: pip install -r requirements.txt

PECmd Setup

  1. Download PECmd:
    • Download the tool from here.
  2. Setup PECmd:
    • Copy PECmd.exe and PECmd.dll to the tool's working directory.
    • Add the directory to your system's PATH.
  3. Verify Installation:
    • Run: PECmd.exe -h

Usage

Command-Line Interface

  • Go Application:
    ./forensic_tool --input=<path_to_browser_artifacts> --output=<output_directory>
  • Python Module:
    python main.py --artifact=<artifact_type> --input=<path_to_data>

Prefetch Analysis

Analyze Prefetch files using PECmd:

PECmd.exe -f <path_to_prefetch_file> -o <output_directory>

Artifact Categories

  • Bookmarks:
    • Extracts URLs and metadata.
  • Browsing History:
    • Retrieves user activity logs.
  • Local Storage:
    • Accesses key-value pairs stored locally.
  • Saved Passwords:
    • Decrypts and analyzes encrypted credentials.
  • Prefetch Analysis:
    • Investigates program execution patterns.
  • Session Storage:
    • Analyzes key-value pairs from active browsing sessions.

Workflow

  1. Initialization:
    • Parses inputs and sets up dependencies.
  2. Artifact Location:
    • Identifies browser profiles (e.g., C:\Users\<User>\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default).
  3. Data Extraction:
    • Uses SQL queries and JSON parsing.
  4. Decryption:
    • Decrypts sensitive data using the browser's encryption keys.
  5. Output Generation:
    • Saves data in CSV and JSON formats.
  6. Prefetch Analysis:
    • Extracts execution times, accessed files, and metadata.

Troubleshooting

PECmd Issues

  • Ensure compatibility with Prefetch files.
  • Verify files are not corrupted or locked.

Python Dependency Issues

  • Update libraries using pip install -r requirements.txt.
  • Ensure Python 3.8 or higher is installed.

Go Application Issues

  • Verify Go installation with go version.
  • Resolve dependency issues with go mod tidy.

Output Errors

  • Verify input paths and ensure data files are not corrupted.

Best Practices

  • Use the tool in an isolated forensic environment.
  • Secure sensitive data during analysis.
  • Keep dependencies and tools updated for optimal performance.

Conclusion

The Browser Artifacts Forensics Tool offers an efficient and robust solution for analyzing artifacts from privacy-centric browsers. Its comprehensive feature set, including Prefetch analysis and data extraction, empowers forensic investigators to uncover critical evidence while maintaining data integrity.


🌐 Web Dashboard Usage

⚑ Getting Started

1. Clone the repository

git clone https://github.com/<your-username>/<repo-name>.git
cd <repo-name>

2. Install dependencies

npm install

3. Run the development server

npm run dev

4. Open in your browser

Visit http://localhost:5173 (or the port shown in your terminal).


πŸ“ Usage

  • Use the theme toggle (top right) to switch between light and dark modes.
  • Click CSV Viewer or Hex Viewer on the home page for detailed data exploration.
  • Use the search bar in CSV Viewer to quickly filter table rows.
  • Scroll horizontally and vertically for large tables; headers stay visible.

πŸ“‘ Data Files

  • Place your Brave browser CSV and hex files in the public/data/ and public/data/hex/ folders, respectively.
  • Supported files: history, bookmarks, passwords, local/session storage, prefetch details, etc.

🀝 Credits


πŸ“¬ Contributing

Pull requests and suggestions are welcome! For major changes, please open an issue first to discuss what you would like to change.


πŸ“„ License

MIT

About

About BraveTrace is a forensic tool designed to extract, analyze, and report browser artifacts from the Brave Browser. The tool enables the retrieval of browsing history, passwords, bookmarks, cache data, fillable form data, and more. It also includes support for decrypting saved passwords and analyzing prefetch execution history.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors