forked from browserutils/kooky
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ie.go
36 lines (26 loc) · 1.01 KB
/
ie.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
package ie
import (
"errors"
"github.com/j178/kooky"
)
func (s *CookieStore) ReadCookies(filters ...kooky.Filter) ([]*kooky.Cookie, error) {
if s == nil {
return nil, errors.New(`cookie store is nil`)
}
return s.CookieStore.ReadCookies(filters...)
}
/*
NOTES:
Internet Explorer 9 uses index.dat
Internet Explorer 10, 11 use WebCacheV01.dat
https://www.digital-detective.net/random-cookie-filenames/
To mitigate the threat, Internet Explorer 9.0.2 now names the cookie files using a randomly-generated alphanumeric string.
http://index-of.es/Forensic/Forensic%20Analysis%20of%20Microsoft%20Internet%20Explorer%20Cookie%20Files.pdf
# least and most significant switched
https://sourceforge.net/projects/odessa/files/Galleta/20040505_1/galleta_20040505_1.tar.gz/download
wrong times
https://www.consumingexperience.com/2011/09/internet-explorer-cookie-contents-new.html
# test VMs
https://web.archive.org/web/20150410044551/https://www.modern.ie/en-us
https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/
*/