dbfp_pub

j3g

dbfp_pub

DBFP: [D]ata[B]ase [F]inger[P]rint. Fingerprint a SQLite database. Include indexing for faster queries.

Go to file

JohnE c87aea45f0 NEW: added processing of an android data folder		2015-11-30 17:35:15 -08:00
docs	MOD: updated the readme	2015-10-28 16:02:44 -07:00
libs	NEW: added processing of an android data folder	2015-11-30 17:35:15 -08:00
tests/test_data	WIP: fingerprint comparison with MD5 index	2015-11-03 08:59:43 -08:00
tools	NEW: added -pull feature to pull all android apps from a device	2015-10-23 13:17:05 -07:00
.gitignore	init checkin	2015-06-06 21:16:43 -07:00
dbfp.py	NEW: added processing of an android data folder	2015-11-30 17:35:15 -08:00

docs/README

      ==================
        DB Fingerprint
      ==================


-------------
  INTRO
-------------
[D]ata[B]ase [F]inger[P]rint

dbfp is a tool that will scan a sqlite database and generate a fingerprint.
The fingerprint will uniquely identify the database.
The fingerprint consists of the database schema, the sql table create statements, 
  md5 calculations, and file meta-data.
The fingerprint is stored to disk in JSON format.

The fingerprint can be used to identify unknown databases from random paths or recovered from deleted space.
The fingerprint can be used for historical comparisons to see what has changed in a new version of an application.


-------------
  FEATURES
-------------
1. Generate a fingerprint in JSON format.
2. Compare a sqlite database with a fingerprint.
3. Rip all apps from a phone and create fingerprints for all SQLite databases


-------------
  USAGE
-------------

***** ***** ***** *****
   DB Fingerprint
***** ***** ***** *****

usage: dbfp.py [-h] [-f FILE] [-fd FPDIR] [-fp FP] [-an APP_NAME]
               [-av APP_VERSION] [-n NOTES] [-pull] [-v]

Fingerprint a sqlite database based on its schema

optional arguments:
  -h, --help            show this help message and exit
  -f FILE, --file FILE
  -fd FPDIR, --fpdir FPDIR
                        path to dirctory of fingerprint files
  -fp FP, --fp FP       fingerprint file to use in comparison
  -an APP_NAME, --app_name APP_NAME
  -av APP_VERSION, --app_version APP_VERSION
  -n NOTES, --notes NOTES
  -pull, --pull
  -v, --verbose