Ethical Hacking/Pen Testing

HackBrowserData: Decrypt passwords/cookies/history/bookmarks from the browser

Published

2 years ago

on

Disclaimer

HackBrowserData is an open-source tool that could help you decrypt data ( password|bookmark|cookie|history|credit card|download|localStorage|extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.

Disclaimer: This tool is limited to security research only, and the user assumes all legal and related responsibilities arising from its use! The author assumes no legal responsibility!

Supported Browser

Windows

Browser Password Cookie Bookmark History
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge ✅ ✅ ✅ ✅
360 Speed ✅ ✅ ✅ ✅
QQ ✅ ✅ ✅ ✅
Brave ✅ ✅ ✅ ✅
Opera ✅ ✅ ✅ ✅
OperaGX ✅ ✅ ✅ ✅
Vivaldi ✅ ✅ ✅ ✅
Yandex ✅ ✅ ✅ ✅
CocCoc ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅
Internet Explorer ❌ ❌ ❌ ❌

MacOS

Based on Apple’s security policy, some browsers require a current user password to decrypt.

Browser Password Cookie Bookmark History
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge ✅ ✅ ✅ ✅
Brave ✅ ✅ ✅ ✅
Opera ✅ ✅ ✅ ✅
OperaGX ✅ ✅ ✅ ✅
Vivaldi ✅ ✅ ✅ ✅
CocCoc ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅
Yandex ✅ ✅ ✅ ✅
Safari ❌ ❌ ❌ ❌

Linux

Browser Password Cookie Bookmark History
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge Dev ✅ ✅ ✅ ✅
Brave ✅ ✅ ✅ ✅
Opera ✅ ✅ ✅ ✅
Vivaldi ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅

Getting started

Install

Installation of HackBrowserData is dead-simple, just download the release for your system and run the binary.

In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.

Building from source

only support go 1.18+ with go generics

$ git clone https://github.com/moonD4rk/HackBrowserData

$ cd HackBrowserData/cmd/hack-browser-data

$ CGO_ENABLED=1 go build

Cross compile

Need install target OS’s gcc library, here’s an example of use Mac building for Windows and Linux

For Windows

brew install mingw-w64

CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC=x86_64-w64-mingw32-gcc go build

For Linux

brew install FiloSottile/musl-cross/musl-cross

CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"

Run

You can double-click to run, or use command line.

PS C:\test> .\hack-browser-data.exe -h
NAME:
   hack-browser-data - Export passwords/cookies/history/bookmarks from browser

USAGE:
   [hack-browser-data -b chrome -f json -dir results -cc]
   Export all browingdata(password/cookie/history/bookmark) from browser
   Github Link: https://github.com/moonD4rk/HackBrowserData

GLOBAL OPTIONS:
   --verbose, --vv                   verbose (default: false)
   --compress, --zip                 compress result to zip (default: false)
   --browser value, -b value         available browsers: all|chrome|opera-gx|vivaldi|coccoc|brave|edge|chromium|chrome-beta|opera|yandex|firefox (default: "all")
   --results-dir value, --dir value  export dir (default: "results")
   --format value, -f value          file name csv|json (default: "csv")
   --profile-path value, -p value    custom profile dir path, get with chrome://version
   --help, -h                        show help (default: false)
   --version, -v                     print the version (default: false)


PS C:\test>  .\hack-browser-data.exe -b all -f json --dir results -zip
[NOTICE] [browser.go:46,pickChromium] find browser Chrome success  
[NOTICE] [browser.go:46,pickChromium] find browser Microsoft Edge success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_download.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_password.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_creditcard.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_bookmark.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_cookie.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_history.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_history.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_download.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_password.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_creditcard.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_bookmark.json success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_cookie.json success

Run with custom browser profile folder

PS C:\Users\User\Desktop> .\hack-browser-data.exe -b chrome -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default'

[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_creditcard.csv success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_bookmark.csv success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_cookie.csv success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_history.csv success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_download.csv success  
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_password.csv success

Related Topics:

Leave a Reply

Your email address will not be published. Required fields are marked *

Trending

Exit mobile version