j3g
/
dbfp_pub
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
DBFP: [D]ata[B]ase [F]inger[P]rint. Fingerprint a SQLite database. Include indexing for faster queries.
59 Commits 2 Branches 0 Tags 2.5 MiB
Python 100%
Go to file
JohnE b22b34a1d7 MOD: updated to reflect the new options added (-dd) (-idx) 2015-12-14 15:27:07 -08:00
docs MOD: updated to reflect the new options added (-dd) (-idx) 2015-12-14 15:27:07 -08:00
libs MOD: insert is working, but there is already collisions for the md5 of the entire schema and the field was marked as unique. I will investigate if this accurate. 2015-12-14 15:27:07 -08:00
tests/test_data WIP: fingerprint comparison with MD5 index 2015-11-03 08:59:43 -08:00
tools NEW: added -pull feature to pull all android apps from a device 2015-10-23 13:17:05 -07:00
.gitignore init checkin 2015-06-06 21:16:43 -07:00
dbfp.py FIX: fixed a bug that occurred from changing import 2015-12-10 19:33:44 -08:00

docs/README 

      ==================
        DB Fingerprint
      ==================


-------------
  INTRO
-------------
[D]ata[B]ase [F]inger[P]rint

dbfp is a tool that will scan a sqlite database and generate a fingerprint.
The fingerprint will uniquely identify the database.
The fingerprint consists of the database schema, the sql table create statements, 
  md5 calculations, and file meta-data.
The fingerprint is stored to disk in JSON format.

The fingerprint can be used to identify unknown databases from random paths or recovered from deleted space.
The fingerprint can be used for historical comparisons to see what has changed in a new version of an application.


-------------
  FEATURES
-------------
1. Generate a fingerprint in JSON format.
2. Compare a sqlite database with a fingerprint.
3. Rip all apps from a phone and create fingerprints for all SQLite databases


-------------
  USAGE
-------------

***** ***** ***** *****
   DB Fingerprint
***** ***** ***** *****

usage: dbfp.py [-h] [-f FILE] [-fd FPDIR] [-fp FP] [-an APP_NAME]
               [-av APP_VERSION] [-n NOTES] [-pull] [-v]

Fingerprint a sqlite database based on its schema

optional arguments:
  -h, --help            show this help message and exit
  -f FILE, --file FILE
  -fd FPDIR, --fpdir FPDIR
                        path to dirctory of fingerprint files
  -fp FP, --fp FP       fingerprint file to use in comparison
  -an APP_NAME, --app_name APP_NAME
  -av APP_VERSION, --app_version APP_VERSION
  -n NOTES, --notes NOTES
  -pull, --pull
  -v, --verbose