# Browser History Forensics (CTF challenge)

> A workstation was flagged for possible data exfiltration and its Firefox history database was imaged. Download history.sqlite, review where the user browsed, and recover what was leaked.

Canonical: https://codelivly.com/ctf/challenges/browser-history-forensics

| | |
|---|---|
| Category | Forensics & OSINT |
| Difficulty | Medium |
| Points | 800 |
| Estimated time | 30 min |
| Type | Live instance |
| Solves | 46 |
| Author | Codelivly |

A workstation was flagged for possible data exfiltration and its Firefox history database was imaged. Download history.sqlite, review where the user browsed, and recover what was leaked. The database is unique to your instance. Tools: sqlite3, a DB browser, or python's sqlite3.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)