Recovering Browser Cache - Page 2
Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14

Thread: Recovering Browser Cache

  1. #11
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    why install software containing spyware/adware when you can use a windows port of strings to get all the info you need?

    C:\DOCUME~1\tedob1\APPLIC~1\Mozilla\Firefox\Profiles\aiw5uwab.default>strings history.dat>hist.txt

    this will dump the entire contents of the history.dat file or any dat file for that matter into a text file

    http://cyberside.dyn.ee/freesoft/unix.htm
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  2. #12
    Computer Forensics
    Join Date
    Jul 2001
    Posts
    672
    For reading .dat files (if you are on a budget like most of us)
    use Pasco from foundstone. It does the trick very easily.
    http://www.foundstone.com/index.htm?...desc/pasco.htm

    Tedob also has the right idea, but if you are going to go ahead and get strings, might as well get a lot more at the same time. unxutils.sf.net has a bunch of goodies. just toss it in to your %PATH% and you've got basic *nix functionality. It's a lot smaller than M$ SFU, and cleaner than cygwin.

    For those of you *nix junkies like me, go here, and get some of the foundstone proggies in source.
    http://sourceforge.net/project/showf...ease_id=152410
    Antionline in a nutshell
    \"You\'re putting the fate of the world in the hands of a bunch of idiots I wouldn\'t trust with a potato gun\"

    Trust your Technolust

  3. #13
    oldie ric-o's Avatar
    Join Date
    Nov 2002
    Posts
    487
    Thanks hog...great tool, thanks for the tip. They have a decent whitepaper called Forensic Analysis of Internet Explorer Activity Files located there as well http://www.foundstone.com/pdf/wp_index_dat.pdf for anyone out there who's interested.

  4. #14
    Member
    Join Date
    Nov 2003
    Posts
    34
    Are you guys sure that the index.dat files etc will help here? I mean isn't he using Mozilla?
    \"\'Do not despise the snake for having no horns, for who is to say it will not become a dragon?\"

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides