Friday, 3 May 2013

View Chrome Web History without access to computers account

Something that was very helpfull to me recently was being able to access Chrome's web history and search terms of a computer that I didnt have the login for.

I was able to successfully work out the information I needed.

The files are located in the application data under Google then Chrome then User Data

Windows 7/vista:
C:\Users\<Username>\AppData\Local\Google\Chrome\User Data\Default

They are SQLite DB files.
See the History or any of the History Index files.

You can query them with any SQLite tool

The time format used in chrome is a bit weird heres how to get it into a usefull datetime.

SELECT id,title,url,datetime((last_visit_time/1000000)-11644473600, 'unixepoch', 'localtime') AS time FROM urls

Optionally tack on something to search for all titles that are like bus
 WHERE title LIKE '%bus%'

I was able to export csv and xls using this tool.

No comments:

Post a Comment