A comprehensive solution for digital forensics and browser artifact analysis, combining a modern web dashboard with powerful command-line tools for extracting, processing, and visualizing data from privacy-centric browsers like Brave.
PrivacyHack Dashboard is a React + Vite application designed for digital forensics, privacy enthusiasts, and anyone curious about their Brave browser data. It provides a seamless interface to:
- View and filter CSV data (history, bookmarks, passwords, etc.)
- Explore raw hex data for advanced analysis
- Switch between light and dark themes
- Enjoy a fast, responsive, and visually appealing UI
Browser Artifacts Forensics Tool (CLI/Backend) is a specialized toolkit for extracting, decrypting, and analyzing browser artifacts and Prefetch files, supporting integration into forensic workflows and outputting data in multiple formats.
- Dashboard Home: Quick access to all data types with beautiful cards
- Theme Toggle: Instantly switch between light and dark modes
- CSV Viewer:
- Tabbed navigation for different data types
- Fast, filterable, scrollable tables with sticky headers
- Black/green terminal-style table for easy reading
- Hex Viewer:
- View raw hex data for all supported files
- Tabbed navigation and easy scrolling
- Modern UI: Built with Tailwind CSS, React, and Vite for speed and style
- Extracts and decrypts browser artifacts:
- Bookmarks, Browsing history, Local storage, Session storage, Saved passwords
- Performs Prefetch file analysis for execution patterns
- Outputs data in CSV and JSON formats
- Integrates seamlessly into forensic workflows
- Frontend: React, Vite
- Styling: Tailwind CSS
- CSV Parsing: PapaParse
- Routing: React Router
- Backend/CLI: Go, Python, PECmd
pro/
βββ public/
β βββ data/ # CSV and hex data files
β βββ ...
βββ src/
β βββ components/ # React components (Home, CSVViewer, Hex)
β βββ assets/ # Static assets
β βββ App.jsx # Main app entry
β βββ ...
βββ index.html
βββ package.json
βββ README.md
- Introduction
- Features
- System Requirements
- Installation
- Usage
- Artifact Categories
- Workflow
- Troubleshooting
- Best Practices
- Conclusion
The Browser Artifacts Forensics Tool is a specialized application designed for digital forensic investigators. It aids in extracting, processing, and analyzing browser artifacts from privacy-centric browsers like Brave. The tool also supports Prefetch file analysis to track program execution patterns, enabling investigators to construct detailed activity timelines.
- Extracts and decrypts browser artifacts:
- Bookmarks
- Browsing history
- Local storage
- Session storage
- Saved passwords
- Performs Prefetch file analysis for execution patterns.
- Outputs data in multiple formats:
- CSV
- JSON
- Integrates seamlessly into forensic workflows.
- Operating System: Windows
- Dependencies:
- Go: To run the core application.
- Python 3.8+: For additional analysis modules.
- PECmd: For Prefetch file analysis.
- Download and Install Go:
- Visit Go's official website and download the latest version.
- Verify Installation:
- Run:
go version
- Run:
- Build the Application:
- Navigate to the directory containing
main.go. - Run:
go build -o forensic_tool main.go
- Navigate to the directory containing
- Download and Install Python:
- Visit Python's official website and download the latest version.
- Ensure "Add Python to PATH" is selected during installation.
- Verify Installation:
- Run:
python --version
- Run:
- Install Dependencies:
- Navigate to the directory with
requirements.txt. - Run:
pip install -r requirements.txt
- Navigate to the directory with
- Download PECmd:
- Download the tool from here.
- Setup PECmd:
- Copy
PECmd.exeandPECmd.dllto the tool's working directory. - Add the directory to your system's PATH.
- Copy
- Verify Installation:
- Run:
PECmd.exe -h
- Run:
- Go Application:
./forensic_tool --input=<path_to_browser_artifacts> --output=<output_directory>
- Python Module:
python main.py --artifact=<artifact_type> --input=<path_to_data>
Analyze Prefetch files using PECmd:
PECmd.exe -f <path_to_prefetch_file> -o <output_directory>- Bookmarks:
- Extracts URLs and metadata.
- Browsing History:
- Retrieves user activity logs.
- Local Storage:
- Accesses key-value pairs stored locally.
- Saved Passwords:
- Decrypts and analyzes encrypted credentials.
- Prefetch Analysis:
- Investigates program execution patterns.
- Session Storage:
- Analyzes key-value pairs from active browsing sessions.
- Initialization:
- Parses inputs and sets up dependencies.
- Artifact Location:
- Identifies browser profiles (e.g.,
C:\Users\<User>\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default).
- Identifies browser profiles (e.g.,
- Data Extraction:
- Uses SQL queries and JSON parsing.
- Decryption:
- Decrypts sensitive data using the browser's encryption keys.
- Output Generation:
- Saves data in CSV and JSON formats.
- Prefetch Analysis:
- Extracts execution times, accessed files, and metadata.
- Ensure compatibility with Prefetch files.
- Verify files are not corrupted or locked.
- Update libraries using
pip install -r requirements.txt. - Ensure Python 3.8 or higher is installed.
- Verify Go installation with
go version. - Resolve dependency issues with
go mod tidy.
- Verify input paths and ensure data files are not corrupted.
- Use the tool in an isolated forensic environment.
- Secure sensitive data during analysis.
- Keep dependencies and tools updated for optimal performance.
The Browser Artifacts Forensics Tool offers an efficient and robust solution for analyzing artifacts from privacy-centric browsers. Its comprehensive feature set, including Prefetch analysis and data extraction, empowers forensic investigators to uncover critical evidence while maintaining data integrity.
git clone https://github.com/<your-username>/<repo-name>.git
cd <repo-name>npm installnpm run devVisit http://localhost:5173 (or the port shown in your terminal).
- Use the theme toggle (top right) to switch between light and dark modes.
- Click CSV Viewer or Hex Viewer on the home page for detailed data exploration.
- Use the search bar in CSV Viewer to quickly filter table rows.
- Scroll horizontally and vertically for large tables; headers stay visible.
- Place your Brave browser CSV and hex files in the
public/data/andpublic/data/hex/folders, respectively. - Supported files: history, bookmarks, passwords, local/session storage, prefetch details, etc.
- Built with React, Vite, and Tailwind CSS
- CSV parsing by PapaParse
- UI inspired by modern dashboard and terminal designs
Pull requests and suggestions are welcome! For major changes, please open an issue first to discuss what you would like to change.

