You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs(readme): reflect Safari, Windows ABE, and DuckDuckGo support
- Add Safari column to supported data categories table
- Add Safari and DuckDuckGo rows to browser matrix with footnotes
- Safari footnote: Full Disk Access prompt on macOS
- Windows footnote: Chromium 127+ cookies need make build-windows
- Add macOS 26.4+ password decryption caveat
- Rewrite Building from source:
- Split standard cross-platform build from Windows ABE build
- Explain C payload is built via zig (recommended) or MinGW gcc
- Document make payload / make build-windows targets
- Remove stale Homebrew install snippet (tap not published)
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.
9
+
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular Chromium-based browsers and Firefox on Windows, macOS and Linux, plus Safari on macOS.
10
10
11
11
> Disclaimer: This tool is only intended for security research. Users are responsible for all legal and related liabilities resulting from the use of this tool. The original author does not assume any legal responsibility.
> On macOS, some Chromium-based browsers **require a current user password** to decrypt.
30
+
>
31
+
> Password decryption may fail on macOS 26.4 or later.
30
32
31
33
| Browser | Windows | macOS | Linux |
32
34
|:---------------|:-------:|:-----:|:-----:|
33
-
| Chrome | ✅ | ✅ | ✅ |
35
+
| Chrome |✅²| ✅ | ✅ |
34
36
| Chrome Beta | ✅ | ✅ | ✅ |
35
37
| Chromium | ✅ | ✅ | ✅ |
36
-
| Edge | ✅ | ✅ | ✅ |
37
-
| Brave | ✅ | ✅ | ✅ |
38
+
| Edge |✅²| ✅ | ✅ |
39
+
| Brave |✅²| ✅ | ✅ |
38
40
| Opera | ✅ | ✅ | ✅ |
39
41
| OperaGX | ✅ | ✅ | - |
40
42
| Vivaldi | ✅ | ✅ | ✅ |
41
43
| Yandex | ✅ | ✅ | - |
42
-
| CocCoc | ✅ | ✅ | - |
44
+
| CocCoc |✅²| ✅ | - |
43
45
| Arc | - | ✅ | - |
46
+
| DuckDuckGo | ✅ | - | - |
44
47
| QQ | ✅ | - | - |
45
48
| 360 ChromeX | ✅ | - | - |
46
49
| 360 Chrome | ✅ | - | - |
47
50
| DC Browser | ✅ | - | - |
48
51
| Sogou Explorer | ✅ | - | - |
49
52
| Firefox | ✅ | ✅ | ✅ |
53
+
| Safari¹ | - | ✅ | - |
54
+
55
+
> ¹ Safari requires Full Disk Access; macOS will prompt on first run — grant it to allow extraction.
56
+
>
57
+
> ² On Windows, decrypting Chromium 127+ cookies (Chrome / Edge / Brave / CocCoc) requires the App-Bound Encryption payload built via `make build-windows` — see [Building from source](#building-from-source) below.
50
58
51
59
## Getting Started
52
60
53
61
### Install
54
62
55
63
Installation of `HackBrowserData` is dead-simple, just download [the release for your system](https://github.com/moonD4rk/HackBrowserData/releases) and run the binary.
56
64
57
-
You can also install via [Homebrew](https://brew.sh/):
58
-
59
-
```bash
60
-
brew install moonD4rk/tap/hack-browser-data
61
-
```
62
-
63
65
> In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.
64
66
65
67
### Building from source
@@ -72,16 +74,35 @@ cd HackBrowserData
72
74
go build ./cmd/hack-browser-data/
73
75
```
74
76
75
-
### Cross-platform build
77
+
####Cross-platform build
76
78
77
79
```bash
78
-
# For Windows
80
+
# For Windows (standard build, no Chromium 127+ ABE cookie support)
79
81
GOOS=windows GOARCH=amd64 go build ./cmd/hack-browser-data/
80
82
81
83
# For Linux
82
84
GOOS=linux GOARCH=amd64 go build ./cmd/hack-browser-data/
83
85
```
84
86
87
+
#### Windows build with App-Bound Encryption (optional)
88
+
89
+
Chrome / Edge / Brave / CocCoc 127+ protect cookies with App-Bound Encryption. Decrypting those cookies requires a small C payload — [Zig](https://ziglang.org/) (0.13+) is the recommended C toolchain (the Makefile calls `zig cc`), though a Windows-targeting `gcc` such as MinGW-w64 also works.
90
+
91
+
```bash
92
+
# 1. Install Zig
93
+
brew install zig # macOS
94
+
scoop install zig # Windows (scoop)
95
+
# or download from https://ziglang.org/download/
96
+
97
+
# 2. Build the payload (outputs crypto/windows/payload/abe_extractor_amd64.bin)
98
+
make payload
99
+
100
+
# 3. Cross-compile the Windows executable with the payload embedded
101
+
make build-windows
102
+
```
103
+
104
+
The resulting `hack-browser-data.exe` includes full ABE cookie decryption on Chromium 127+.
0 commit comments