Skip to content

Collect browser history with existing root access - #122

Open
besendorf wants to merge 1 commit into
mainfrom
feature/collect-browser-history
Open

Collect browser history with existing root access#122
besendorf wants to merge 1 commit into
mainfrom
feature/collect-browser-history

Conversation

@besendorf

@besendorf besendorf commented Aug 17, 2026

Copy link
Copy Markdown
Collaborator

Summary

Adds an explicit, opt-in browser-history acquisition module for devices that already expose working root access through su. AndroidQF never attempts to root the device, stop browser processes, or copy evidence through shared storage.

  • adds -browser-history yes|no, defaulting to No in the interactive prompt
  • collects Chrome, Brave, Microsoft Edge, and Samsung Internet History databases plus present WAL/SHM sidecars
  • validates every pull in host-side staging before creating its ZIP entry, retaining encrypted staging for age acquisitions
  • writes browser_history/manifest.json with browser, package, profile, device path, archive path, method, and collection status
  • records root_unavailable without aborting the wider acquisition when su is absent

This is the acquisition half of mvt-project/mvt#876, with parsing implemented by mvt-project/mvt#877. The locations are deliberately restricted to paths with evidence: the historical MVT Chrome module fixed the Chrome path, while ALEAPP documents the app_chrome/Default/History and app_sbrowser/Default/History patterns with sample-backed Chrome, Brave, Edge, and Samsung Internet coverage. Package-name substitutions without equivalent evidence are not included.

The Go test suite and go vet ./... pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant