From 3ec67370bdf01caa9e56762d2d4ceb38102b4e7b Mon Sep 17 00:00:00 2001 From: Mischa Rick van Geelen Date: Sun, 7 Jul 2024 19:57:10 +0200 Subject: [PATCH 1/3] Added collection of Opera (Stable/GX) browser profile storage location for browser history --- .DS_Store | Bin 0 -> 6148 bytes acquire/acquire.py | 12 +++++++++++- 2 files changed, 11 insertions(+), 1 deletion(-) create mode 100644 .DS_Store diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 0000000000000000000000000000000000000000..b2c4ee0e3af1b0b1ffceff72a1d91380b418047d GIT binary patch literal 6148 zcmeHKJ8nWT5S&erfAefN>wRm6yNp7D-PyluZWyVw0F`}crzAMk<=K5+QS z-|u`&CIzH`6p#W^Knh%0fhw@m*_F@LaZ*4E{Cx%d`_Sl)y>Lj3PX~u+0f-ZZ!#Iy# zg4jGj?1e)jBQ#4YF{xH9h9#ZxR(ZW}NK87cnh&d+tvVEo+j)MAbXZT+C}^3Wq4i#3;vHcsYKI cq|9qR=YB675`)fo(24pPa9w0l;MNM90CoNqi2wiq literal 0 HcmV?d00001 diff --git a/acquire/acquire.py b/acquire/acquire.py index d52f4e3d..4bd075c8 100644 --- a/acquire/acquire.py +++ b/acquire/acquire.py @@ -1075,7 +1075,7 @@ class EDR(Module): @register_module("--history") class History(Module): - DESC = "browser history from IE, Edge, Firefox, and Chrome" + DESC = "browser history from IE, Edge, Firefox, Chrome, Brave and Opera (Stable and GX)" DIR_COMBINATIONS = namedtuple("DirCombinations", ["root_dirs", "dir_extensions", "history_files"]) COMMON_DIR_COMBINATIONS = [ DIR_COMBINATIONS( @@ -1111,6 +1111,16 @@ class History(Module): ".config/BraveSoftware", # Brave - MacOS "Library/Application Support/BraveSoftware", + # Opera - Windows (Stable) + "AppData/Roaming/Opera Software/Opera Stable/Default", + "AppData/Local/Opera Software/Opera Stable/Default", + # Opera - Windows (GX) + "AppData/Roaming/Opera Software/Opera GX Stable", + "AppData/Local/Opera Software/Opera GX Stable", + # Opera - MacOS (Stable) + "Library/Application Support/com.operasoftware.Opera/Default", + # Opera - MacOS (GX) + "Library/Application Support/com.operasoftware.OperaGX", ], ["*", "Snapshots/*/*"], [ From e3ff755ae34d27a3bb3b7236e419ef6f787ba720 Mon Sep 17 00:00:00 2001 From: Mischa Rick van Geelen Date: Sun, 7 Jul 2024 19:58:16 +0200 Subject: [PATCH 2/3] Added collection of Opera (Stable/GX) browser profile storage location for browser history --- .DS_Store | Bin 6148 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 .DS_Store diff --git a/.DS_Store b/.DS_Store deleted file mode 100644 index b2c4ee0e3af1b0b1ffceff72a1d91380b418047d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 6148 zcmeHKJ8nWT5S&erfAefN>wRm6yNp7D-PyluZWyVw0F`}crzAMk<=K5+QS z-|u`&CIzH`6p#W^Knh%0fhw@m*_F@LaZ*4E{Cx%d`_Sl)y>Lj3PX~u+0f-ZZ!#Iy# zg4jGj?1e)jBQ#4YF{xH9h9#ZxR(ZW}NK87cnh&d+tvVEo+j)MAbXZT+C}^3Wq4i#3;vHcsYKI cq|9qR=YB675`)fo(24pPa9w0l;MNM90CoNqi2wiq From 0778323936375d698417f174c1c125129a5063f1 Mon Sep 17 00:00:00 2001 From: Mischa Rick van Geelen Date: Sun, 7 Jul 2024 19:58:35 +0200 Subject: [PATCH 3/3] Added collection of Opera (Stable/GX) browser profile storage location for browser history --- acquire/acquire.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/acquire/acquire.py b/acquire/acquire.py index 4bd075c8..ee318ec8 100644 --- a/acquire/acquire.py +++ b/acquire/acquire.py @@ -1084,7 +1084,7 @@ class History(Module): ".config/chromium", # Chrome - RHEL/Ubuntu - DNF ".config/google-chrome", - # Edge - RHEL/Ubuntu - DNF/apt + # Edge - RHEL/Ubuntu - DNF/apt ".config/microsoft-edge", # Chrome - RHEL/Ubuntu - Flatpak ".var/app/com.google.Chrome/config/google-chrome",