Analysis of IE/Fire...
 
Notifications
Clear all

Analysis of IE/Firefox cookies

6 Posts
6 Users
0 Reactions
1,184 Views
napster
(@napster)
Active Member
Joined: 17 years ago
Posts: 6
Topic starter  

HI….
can anyone suggest on Analysis of cookies? As in any tips or software for doing analysis?

Pls help…

Thanks


   
Quote
(@werner)
Active Member
Joined: 19 years ago
Posts: 18
 

can anyone suggest on Analysis of cookies? As in any tips or software for doing analysis?

Information about the fields of the IE/Mozilla cookie files you can find on my site http//www.gaijin.at/infos.php (click "Translate" for English version).

With the program "Historian" (http//www.gaijin.at/dlhistorian.php) you can export the content (URLs, date/time etc.) to text or Excel CSV files.


   
ReplyQuote
(@mmachor)
Trusted Member
Joined: 17 years ago
Posts: 70
 

I've got software to do both, what type of information are you looking for in these?


   
ReplyQuote
neddy
(@neddy)
Estimable Member
Joined: 21 years ago
Posts: 182
 

Most cookie files will contain information that when examined will indicate that a 'User' profile has visited an identifiable web site and the file created date 'may' indicate when. However the data in the cookie file is based on the specific needs of the web site and without the help of the web site administrator this data makes little sense to the uninformed observer.
RFC 2109 http//www.ietf.org/rfc/rfc2109.txt defines the standard protocols for cookie files.

Some cookie files can contain User names and passwords, Bebo.com is a good example of this. In my experience, if you replace the Firefox profile files associated with a specific User into a same version test profile and then access the Tools>Options>Security Tab>Show Passwords you will be presented with some usefull information if the User has allowed the web site to remember passwords etc.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Nirsoft provides a tool to complete both these tasks

Internet Explorer - http//www.nirsoft.net/utils/iecookies.html

Firefox - http//www.nirsoft.net/utils/iehv.html

Also don't overlook the evidential value of cache files, TIP If your using firefox in a VM and cant get the nirsoft cache tools in (also available on his website) you can type the command "aboutcache" in firefox its self to view them. Firefox saves them as one big file so viewing them within firefox its self of a viewer is a god send

Hope this helps

Steve


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
 

NetAnalysis is a great tool. It is not just a cookie monster either. It does cache, IE History, Firefox cookies and other. It also carves record from files (ie unallc, pagefile or slack). D


   
ReplyQuote
Share: