Skip to content

Commit 7e64d50

Browse files
authored
docs(readme): reflect Safari, Windows ABE support (#584)
* docs(readme): reflect Safari, Windows ABE, and DuckDuckGo support * docs(readme): name the ABE build output as hack-browser-data.exe * docs(readme): address review feedback on ABE browsers and FDA wording
1 parent 5cad2d1 commit 7e64d50

1 file changed

Lines changed: 46 additions & 25 deletions

File tree

README.md

Lines changed: 46 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -6,60 +6,62 @@
66

77
[![Lint](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml) [![Build](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml) [![Release](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml) [![Tests](https://github.com/moonD4rk/HackBrowserData/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/test.yml) [![codecov](https://codecov.io/gh/moonD4rk/HackBrowserData/branch/main/graph/badge.svg?token=KWJCN38657)](https://codecov.io/gh/moonD4rk/HackBrowserData)
88

9-
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.
9+
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular Chromium-based browsers and Firefox on Windows, macOS and Linux, plus Safari on macOS.
1010

1111
> Disclaimer: This tool is only intended for security research. Users are responsible for all legal and related liabilities resulting from the use of this tool. The original author does not assume any legal responsibility.
1212
1313
## Supported Data Categories
1414

15-
| Category | Chromium-based | Firefox |
16-
|:---------------|:--------------:|:-------:|
17-
| Password |||
18-
| Cookie |||
19-
| Bookmark |||
20-
| History |||
21-
| Download |||
22-
| Credit Card || - |
23-
| Extension |||
24-
| LocalStorage |||
25-
| SessionStorage || - |
15+
| Category | Chromium-based | Firefox | Safari |
16+
|:---------------|:--------------:|:-------:|:------:|
17+
| Password ||||
18+
| Cookie ||||
19+
| Bookmark ||||
20+
| History ||||
21+
| Download ||||
22+
| Credit Card || - | - |
23+
| Extension ||||
24+
| LocalStorage ||||
25+
| SessionStorage || - | - |
2626

2727
## Supported Browsers
2828

2929
> On macOS, some Chromium-based browsers **require a current user password** to decrypt.
30+
>
31+
> Password decryption may fail on macOS 26.4 or later.
3032
3133
| Browser | Windows | macOS | Linux |
3234
|:---------------|:-------:|:-----:|:-----:|
33-
| Chrome | |||
34-
| Chrome Beta | |||
35+
| Chrome | ✅² |||
36+
| Chrome Beta | ✅² |||
3537
| Chromium ||||
36-
| Edge | |||
37-
| Brave | |||
38+
| Edge | ✅² |||
39+
| Brave | ✅² |||
3840
| Opera ||||
3941
| OperaGX ||| - |
4042
| Vivaldi ||||
4143
| Yandex ||| - |
42-
| CocCoc | || - |
44+
| CocCoc | ✅² || - |
4345
| Arc | - || - |
46+
| DuckDuckGo || - | - |
4447
| QQ || - | - |
4548
| 360 ChromeX || - | - |
4649
| 360 Chrome || - | - |
4750
| DC Browser || - | - |
4851
| Sogou Explorer || - | - |
4952
| Firefox ||||
53+
| Safari¹ | - || - |
54+
55+
> ¹ Safari requires Full Disk Access; enable it in System Settings → Privacy & Security → Full Disk Access if extraction returns empty results.
56+
>
57+
> ² On Windows, decrypting Chromium 127+ cookies (Chrome / Chrome Beta / Edge / Brave / CocCoc) requires the App-Bound Encryption payload built via `make build-windows` — see [Building from source](#building-from-source) below.
5058
5159
## Getting Started
5260

5361
### Install
5462

5563
Installation of `HackBrowserData` is dead-simple, just download [the release for your system](https://github.com/moonD4rk/HackBrowserData/releases) and run the binary.
5664

57-
You can also install via [Homebrew](https://brew.sh/):
58-
59-
```bash
60-
brew install moonD4rk/tap/hack-browser-data
61-
```
62-
6365
> In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.
6466
6567
### Building from source
@@ -72,16 +74,35 @@ cd HackBrowserData
7274
go build ./cmd/hack-browser-data/
7375
```
7476

75-
### Cross-platform build
77+
#### Cross-platform build
7678

7779
```bash
78-
# For Windows
80+
# For Windows (standard build, no Chromium 127+ ABE cookie support)
7981
GOOS=windows GOARCH=amd64 go build ./cmd/hack-browser-data/
8082

8183
# For Linux
8284
GOOS=linux GOARCH=amd64 go build ./cmd/hack-browser-data/
8385
```
8486

87+
#### Windows build with App-Bound Encryption (optional)
88+
89+
Chrome / Chrome Beta / Edge / Brave / CocCoc 127+ protect cookies with App-Bound Encryption. Decrypting those cookies requires a small C payload — [Zig](https://ziglang.org/) (0.13+) is the recommended C toolchain (the Makefile calls `zig cc`). MinGW-w64 `gcc` can also build the sources manually if you bypass `make payload`.
90+
91+
```bash
92+
# 1. Install Zig
93+
brew install zig # macOS
94+
scoop install zig # Windows (scoop)
95+
# or download from https://ziglang.org/download/
96+
97+
# 2. Build the payload (outputs crypto/windows/payload/abe_extractor_amd64.bin)
98+
make payload
99+
100+
# 3. Build hack-browser-data.exe with the ABE payload embedded
101+
make build-windows
102+
```
103+
104+
The resulting `hack-browser-data.exe` includes full ABE cookie decryption on Chromium 127+.
105+
85106
## Usage
86107

87108
```

0 commit comments

Comments
 (0)