Dumpzilla

Dumpzilla application is developed in Python 3.x and has the purpose of extracting all forensic interesting information from Firefox, Iceweasel and Seamonkey browsers to be analyzed. It works under Unix and Windows 32/64 bits systems in command line interface, allowing information dumps to be redirected by pipes with tools such as grep, awk, cut, sed. Dumpzilla allows one to visualize sections like cookies, bookmarks, downloads, addons, search customization and extract certain content.

Use cases include forensic analysis of browser profiles to recover cookies, history, downloads, and other artifacts. It supports filtering by domain, name, dates, and other criteria for targeted extraction. Profile locations are specified for different operating systems, such as Unix profiles in /home/$USER/.mozilla/firefox/xxxx.default.

Due to Python 3.x development, it might not work properly in old Python versions, mainly with certain characters. Wildcards and regular expressions enable advanced searching.

Dumpzilla analyzes Mozilla profile folders, parsing files for forensic data like cookies, bookmarks, downloads, addons. It supports options for filtering by domain, host, dates, secure flags using wildcards (% for any string, _ for single char) or regex. Output includes detailed fields like SHA256 hashes, expiry times, creation/access dates. Data can be exported as JSON. Operates via command line on Python 3.x with dependencies like libnss3, python3-lz4.