cedowens/SwiftBelt

Firefox History Check

Opened this issue · 1 comments

The -BrowserHistory option does not correctly identify when Firefox is not installed on the host. Expected to see https://github.com/cedowens/SwiftBelt/blob/master/Sources/SwiftBelt/main.swift#L716 when Firefox is not installed.

There is a stray 75 bytes at the end of the output. I couldn't quickly determine where it came from.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 _______  _     _  ___   _______  _______  _______  _______  ___      _______
|       || | _ | ||   | |       ||       ||  _    ||       ||   |    |       |
|  _____|| || || ||   | |    ___||_     _|| |_|   ||    ___||   |    |_     _|
| |_____ |       ||   | |   |___   |   |  |       ||   |___ |   |      |   |
|_____  ||       ||   | |    ___|  |   |  |  _   | |    ___||   |___   |   |
 _____| ||   _   ||   | |   |      |   |  | |_|   ||   |___ |       |  |   |
|_______||__| |__||___| |___|      |___|  |_______||_______||_______|  |___|

SwiftBelt: A MacOS enumerator similar to @harmjoy's Seatbelt. Does not use any command line utilities
author: @cedowens
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

##########################################
==>Browser History Info:

***************Quarantine History Results for user zeroCool***************
Date: 1989-06-05 14:26:31 | App: com.apple.Safari | File: https://raw.githubusercontent.com/cedowens/SwiftBelt/master/SwiftBelt | OriginURL: 

***************Safari history results for user zeroCool***************
[-] Could not open the Safari History.db file for user zeroCool

***************Chrome history results for user zeroCool***************
Date: 2020-06-05 14:27:46 | URL: https://www.rickrolled.com/ | Title: Rick Rolled
75 bytes
##########################################

Thanks for sharing. Interesting...the else clause should catch that condition and print a message regarding the Firefox file not being present. I'l also do some additional testing on this.