Skip to content

Commit 6565ab6

Browse files
committed
docs(readme): reflect Safari, Windows ABE, and DuckDuckGo support
- Add Safari column to supported data categories table - Add Safari and DuckDuckGo rows to browser matrix with footnotes - Safari footnote: Full Disk Access prompt on macOS - Windows footnote: Chromium 127+ cookies need make build-windows - Add macOS 26.4+ password decryption caveat - Rewrite Building from source: - Split standard cross-platform build from Windows ABE build - Explain C payload is built via zig (recommended) or MinGW gcc - Document make payload / make build-windows targets - Remove stale Homebrew install snippet (tap not published)
1 parent 5cad2d1 commit 6565ab6

1 file changed

Lines changed: 45 additions & 24 deletions

File tree

README.md

Lines changed: 45 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -6,60 +6,62 @@
66

77
[![Lint](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml) [![Build](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml) [![Release](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml) [![Tests](https://github.com/moonD4rk/HackBrowserData/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/test.yml) [![codecov](https://codecov.io/gh/moonD4rk/HackBrowserData/branch/main/graph/badge.svg?token=KWJCN38657)](https://codecov.io/gh/moonD4rk/HackBrowserData)
88

9-
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.
9+
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular Chromium-based browsers and Firefox on Windows, macOS and Linux, plus Safari on macOS.
1010

1111
> Disclaimer: This tool is only intended for security research. Users are responsible for all legal and related liabilities resulting from the use of this tool. The original author does not assume any legal responsibility.
1212
1313
## Supported Data Categories
1414

15-
| Category | Chromium-based | Firefox |
16-
|:---------------|:--------------:|:-------:|
17-
| Password |||
18-
| Cookie |||
19-
| Bookmark |||
20-
| History |||
21-
| Download |||
22-
| Credit Card || - |
23-
| Extension |||
24-
| LocalStorage |||
25-
| SessionStorage || - |
15+
| Category | Chromium-based | Firefox | Safari |
16+
|:---------------|:--------------:|:-------:|:------:|
17+
| Password ||||
18+
| Cookie ||||
19+
| Bookmark ||||
20+
| History ||||
21+
| Download ||||
22+
| Credit Card || - | - |
23+
| Extension ||||
24+
| LocalStorage ||||
25+
| SessionStorage || - | - |
2626

2727
## Supported Browsers
2828

2929
> On macOS, some Chromium-based browsers **require a current user password** to decrypt.
30+
>
31+
> Password decryption may fail on macOS 26.4 or later.
3032
3133
| Browser | Windows | macOS | Linux |
3234
|:---------------|:-------:|:-----:|:-----:|
33-
| Chrome | |||
35+
| Chrome | ✅² |||
3436
| Chrome Beta ||||
3537
| Chromium ||||
36-
| Edge | |||
37-
| Brave | |||
38+
| Edge | ✅² |||
39+
| Brave | ✅² |||
3840
| Opera ||||
3941
| OperaGX ||| - |
4042
| Vivaldi ||||
4143
| Yandex ||| - |
42-
| CocCoc | || - |
44+
| CocCoc | ✅² || - |
4345
| Arc | - || - |
46+
| DuckDuckGo || - | - |
4447
| QQ || - | - |
4548
| 360 ChromeX || - | - |
4649
| 360 Chrome || - | - |
4750
| DC Browser || - | - |
4851
| Sogou Explorer || - | - |
4952
| Firefox ||||
53+
| Safari¹ | - || - |
54+
55+
> ¹ Safari requires Full Disk Access; macOS will prompt on first run — grant it to allow extraction.
56+
>
57+
> ² On Windows, decrypting Chromium 127+ cookies (Chrome / Edge / Brave / CocCoc) requires the App-Bound Encryption payload built via `make build-windows` — see [Building from source](#building-from-source) below.
5058
5159
## Getting Started
5260

5361
### Install
5462

5563
Installation of `HackBrowserData` is dead-simple, just download [the release for your system](https://github.com/moonD4rk/HackBrowserData/releases) and run the binary.
5664

57-
You can also install via [Homebrew](https://brew.sh/):
58-
59-
```bash
60-
brew install moonD4rk/tap/hack-browser-data
61-
```
62-
6365
> In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.
6466
6567
### Building from source
@@ -72,16 +74,35 @@ cd HackBrowserData
7274
go build ./cmd/hack-browser-data/
7375
```
7476

75-
### Cross-platform build
77+
#### Cross-platform build
7678

7779
```bash
78-
# For Windows
80+
# For Windows (standard build, no Chromium 127+ ABE cookie support)
7981
GOOS=windows GOARCH=amd64 go build ./cmd/hack-browser-data/
8082

8183
# For Linux
8284
GOOS=linux GOARCH=amd64 go build ./cmd/hack-browser-data/
8385
```
8486

87+
#### Windows build with App-Bound Encryption (optional)
88+
89+
Chrome / Edge / Brave / CocCoc 127+ protect cookies with App-Bound Encryption. Decrypting those cookies requires a small C payload — [Zig](https://ziglang.org/) (0.13+) is the recommended C toolchain (the Makefile calls `zig cc`), though a Windows-targeting `gcc` such as MinGW-w64 also works.
90+
91+
```bash
92+
# 1. Install Zig
93+
brew install zig # macOS
94+
scoop install zig # Windows (scoop)
95+
# or download from https://ziglang.org/download/
96+
97+
# 2. Build the payload (outputs crypto/windows/payload/abe_extractor_amd64.bin)
98+
make payload
99+
100+
# 3. Cross-compile the Windows executable with the payload embedded
101+
make build-windows
102+
```
103+
104+
The resulting `hack-browser-data.exe` includes full ABE cookie decryption on Chromium 127+.
105+
85106
## Usage
86107

87108
```

0 commit comments

Comments
 (0)