Forensic Screenshot with SHA-256 Hash — Libor Benes (Dr. B)

📝 Forensic Screenshot with SHA-256 Hash brings an advanced, tamper-resistant evidence capture and verification tool directly into your Firefox desktop sidebar.

With a single click, it captures the visible area of your active tab and bundles it with a clean text report documenting the domain, full URL, local time, and UTC time down to the exact second.

Simultaneously, it generates a unique cryptographic signature of the screenshot to lock down data integrity.

Designed for security researchers, digital forensic analysts, legal professionals, and pentesters who need quick, authoritative evidence capture with mathematical proof of validity without leaving their browser workflow.

🏛️ About Forensic Evidence Capture:
When documenting online activity, an isolated image file is rarely enough. To build a valid record, you need an exact timestamp paired with the precise source URL. More importantly, you must be able to prove the image has not been edited after the fact.

Forensic Screenshot with SHA-256 Hash automates this process. It instantly bundles your visual proof with a clean metadata text report, embedding a matching cryptographic fingerprint directly inside the logs.

📐 Desktop Sidebar Design:
Forensic Screenshot with SHA-256 Hash runs as a persistent Firefox sidebar—always available alongside any tab or investigation you are actively working on.

⚙️ How It Works — 100% Client-Side:
• 1-Click Action: Click the "CAPTURE FORENSIC PROOF" button to instantly snapshot the tab.
• Automated Folders: The add-on creates a dedicated Forensics/ folder inside your default.
• Downloads directory to keep your case logs organized.
• Dual-File Bundles: Every capture saves two matching, timestamped files:
• A .png image file capturing the visible webpage.
• A .txt text file documenting the core metadata evidence and the file verification signature.
• Automated SHA-256 Generation: The browser automatically calculates a unique 64-character hash of the image at the exact millisecond of capture.
• UI Case Log: The sidebar displays an instant visual confirmation showing the exact filenames, the local save path, the source URL, and the live SHA-256 fingerprint in red monospace text for quick tracking.

🔒 Security-First Architecture:
This extension was engineered from the ground up for strict privacy, zero trust environments, and secure code compliance:
✅ No Data Collection: Explicitly declared in manifest.json over data_collection_permissions requiring ["none"].
✅ No Telemetry: No analytics, no external network pings, and no cloud uploads. The Web Crypto API runs 100% locally on your machine.
✅ No eval(): Strict, audited JavaScript that fully meets modern Firefox extension security standards.
✅ No innerHTML: The extension builds its entire visual interface using safe, isolated DOM construction to eliminate injection risks.
✅ No Host Permissions: The extension uses a lightweight permission model (activeTab) to access content safely without reading your overall browser history.
✅ Flat File Structure: All code files sit cleanly at the root of the extension package for absolute transparency and auditability.

"Document the web. Seal and secure the data integrity. Protect the timeline, bits, bytes, hex, and metadata. Deploy the evidence payload."