You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs(readme): reflect Safari, Windows ABE support (#584)
* docs(readme): reflect Safari, Windows ABE, and DuckDuckGo support
* docs(readme): name the ABE build output as hack-browser-data.exe
* docs(readme): address review feedback on ABE browsers and FDA wording
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.
9
+
`HackBrowserData` is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular Chromium-based browsers and Firefox on Windows, macOS and Linux, plus Safari on macOS.
10
10
11
11
> Disclaimer: This tool is only intended for security research. Users are responsible for all legal and related liabilities resulting from the use of this tool. The original author does not assume any legal responsibility.
> On macOS, some Chromium-based browsers **require a current user password** to decrypt.
30
+
>
31
+
> Password decryption may fail on macOS 26.4 or later.
30
32
31
33
| Browser | Windows | macOS | Linux |
32
34
|:---------------|:-------:|:-----:|:-----:|
33
-
| Chrome | ✅ | ✅ | ✅ |
34
-
| Chrome Beta | ✅ | ✅ | ✅ |
35
+
| Chrome |✅²| ✅ | ✅ |
36
+
| Chrome Beta |✅²| ✅ | ✅ |
35
37
| Chromium | ✅ | ✅ | ✅ |
36
-
| Edge | ✅ | ✅ | ✅ |
37
-
| Brave | ✅ | ✅ | ✅ |
38
+
| Edge |✅²| ✅ | ✅ |
39
+
| Brave |✅²| ✅ | ✅ |
38
40
| Opera | ✅ | ✅ | ✅ |
39
41
| OperaGX | ✅ | ✅ | - |
40
42
| Vivaldi | ✅ | ✅ | ✅ |
41
43
| Yandex | ✅ | ✅ | - |
42
-
| CocCoc | ✅ | ✅ | - |
44
+
| CocCoc |✅²| ✅ | - |
43
45
| Arc | - | ✅ | - |
46
+
| DuckDuckGo | ✅ | - | - |
44
47
| QQ | ✅ | - | - |
45
48
| 360 ChromeX | ✅ | - | - |
46
49
| 360 Chrome | ✅ | - | - |
47
50
| DC Browser | ✅ | - | - |
48
51
| Sogou Explorer | ✅ | - | - |
49
52
| Firefox | ✅ | ✅ | ✅ |
53
+
| Safari¹ | - | ✅ | - |
54
+
55
+
> ¹ Safari requires Full Disk Access; enable it in System Settings → Privacy & Security → Full Disk Access if extraction returns empty results.
56
+
>
57
+
> ² On Windows, decrypting Chromium 127+ cookies (Chrome / Chrome Beta / Edge / Brave / CocCoc) requires the App-Bound Encryption payload built via `make build-windows` — see [Building from source](#building-from-source) below.
50
58
51
59
## Getting Started
52
60
53
61
### Install
54
62
55
63
Installation of `HackBrowserData` is dead-simple, just download [the release for your system](https://github.com/moonD4rk/HackBrowserData/releases) and run the binary.
56
64
57
-
You can also install via [Homebrew](https://brew.sh/):
58
-
59
-
```bash
60
-
brew install moonD4rk/tap/hack-browser-data
61
-
```
62
-
63
65
> In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.
64
66
65
67
### Building from source
@@ -72,16 +74,35 @@ cd HackBrowserData
72
74
go build ./cmd/hack-browser-data/
73
75
```
74
76
75
-
### Cross-platform build
77
+
####Cross-platform build
76
78
77
79
```bash
78
-
# For Windows
80
+
# For Windows (standard build, no Chromium 127+ ABE cookie support)
79
81
GOOS=windows GOARCH=amd64 go build ./cmd/hack-browser-data/
80
82
81
83
# For Linux
82
84
GOOS=linux GOARCH=amd64 go build ./cmd/hack-browser-data/
83
85
```
84
86
87
+
#### Windows build with App-Bound Encryption (optional)
88
+
89
+
Chrome / Chrome Beta / Edge / Brave / CocCoc 127+ protect cookies with App-Bound Encryption. Decrypting those cookies requires a small C payload — [Zig](https://ziglang.org/) (0.13+) is the recommended C toolchain (the Makefile calls `zig cc`). MinGW-w64 `gcc` can also build the sources manually if you bypass `make payload`.
90
+
91
+
```bash
92
+
# 1. Install Zig
93
+
brew install zig # macOS
94
+
scoop install zig # Windows (scoop)
95
+
# or download from https://ziglang.org/download/
96
+
97
+
# 2. Build the payload (outputs crypto/windows/payload/abe_extractor_amd64.bin)
98
+
make payload
99
+
100
+
# 3. Build hack-browser-data.exe with the ABE payload embedded
101
+
make build-windows
102
+
```
103
+
104
+
The resulting `hack-browser-data.exe` includes full ABE cookie decryption on Chromium 127+.
0 commit comments