For this purpose Ryan shared with me a python script he quickly wrote that uses the leveldb wrappers to access data store. The data was located in the 000003.log file. In order to view the key-value pairs more easily I needed to dump the data from the data store. The was only one remaining directory, Local Storage, and within it the LevelDB folder. After the app is closed all those browser artifacts are gone. If called to image a target device, being able to do so when FF-Focus is open would be the ideal thing, it will also be the most unlikely scenario. The cache folder has contents and the current session cookies are accessible. As can be seen below, the app had created all the files we would expect to see in a typical browser directory when in use. In order to test I used some of the equipment mentioned in the following link for testing and analysis.Īndroid - Mobile testing hardware and softwareĪfter downloading the app to my exemplar phone, I did some browsing and imaged the device before closing the app. I wondered how much data could remain, if any, after the app completed its privacy routines. As stated in the picture below the app blocks ads, trackers and deletes all browsing related items like history and cookies. And like anything else in life always make sure to validate, validate, validate.įF-Focus is a privacy oriented browser developed by the Mozilla organization. Any and all shortcomings with this analysis obviously reside with me. I am thankful for their generosity in regards to their expertise and time. The data will be located at '/userdata/data//app_webview/Local Storage/leveldb' directory.įirst I want to thank Ryan Benson ( Benson) and Phill Moore ( for their help and guidance with this analysis. Data placed by websites in the Local Storage folder LevelDB database for the Firefox Focus Privacy Browser (FF-Focus) app will remain and be accessible even after browsing history deletion.
0 Comments
Leave a Reply. |