firefox-cache-forensics : Tools for forensic analysis of Firefox Cache

The goal of this project is to publish tools and discussion about forensic recovery of the firefox cache in order to contribute to the forensic community.

Although there are free tools to browse and recover Firefox cache out there, they (almost) all seem to be Windows-based GUI tools. Nothing against GUIs, but I needed source code in order to write a forensic timeline module for Kristinn Gudjonsson’s log2timeline utility ( I found there to be few sources of reliable information about the Firefox cache (other than the source code – but I was hoping for a cheat sheet). So I dug around and found a few sources, plus read Firefox code, until I understood how things work and could code against them.

I plan to publish tools and papers in this space to bring the Firefox cache structure into better public understanding and make tools available for re-use.

Pages I’ve written to describe the Firefox cache and forensics issues to do with it.

Reading and Extracting the Firefox Cache – A general description of how to read and extract data from the Firefox Cache.

Firefox Cache Format – Detailed description of the Firefox cache format and structure.

Forensic Findings – Research results and forensic implications for the way Firefox handles its cache.

Currently this list is short: – started as a proof-of-concept tool and morphed into something functional. Searches, displays and extracts Firefox cache entries and metadata from the command line. – log2timeline module to integrate Firefox cache dates into the “super timeline” forensic tool.

Download right here :

swet (sustained workload & efficiency test)

swet (sustained workload & efficiency test) is a portable benchmark for POSIX and BSD operating systems with multi-thread and multi-process capabilities and flexible, powerful report options.

Features  :

  • Uniform performance/efficiency unit across platforms
  • multi-process (daemon) capability
  • multi-thread capability
  • nanosecond / microsecond precision option
  • flexible detail selection
  • floating-point tests
  • integer tests
  • math / logic / bitwise / branch tests
  • 8-, 16-, 32-, 64-, and 128-bit tests
  • flexible test class selection
  • test sets definable by list and/or range
  • test sets may be read from file or as command-line argument
  • flexible output formatting – CSV / HTML / Framed-Table

Recent Release Notes 1.4.57 Stable 24 Apr 2012 : This release includes intereg-64 bits, and floating-point-64 and -128 bits basic arithmetic tests.

Download Latest version :
Read more in here :