HackBrowserData/README_ZH.md

183 lines
8.3 KiB
Markdown
Raw Normal View History

2020-07-23 06:42:32 +00:00
# HackBrowserData
2021-12-10 03:41:17 +00:00
`HackBrowserData` 是一个浏览器数据(密码 | 历史记录 | Cookie | 书签 | 信用卡 | 下载记录)的导出工具,支持全平台主流浏览器。
2020-07-23 06:42:32 +00:00
2020-10-22 05:20:06 +00:00
2021-12-10 03:41:17 +00:00
> 免责声明:此工具仅限于安全研究,用户承担因使用此工具而导致的所有法律和相关责任!作者不承担任何法律责任!
2020-10-22 05:20:06 +00:00
2021-02-10 16:36:50 +00:00
## 各平台浏览器支持情况
2020-07-23 06:42:32 +00:00
2021-02-10 16:36:50 +00:00
### Windows
2020-07-23 06:42:32 +00:00
2021-02-10 16:36:50 +00:00
| 浏览器 | 密码 | Cookie | 书签 | 历史记录 |
| :------- | :------: | :----: | :------: | :-----: |
2021-01-29 05:02:02 +00:00
| Google Chrome| ✅ | ✅ | ✅ | ✅ |
| Google Chrome Beta| ✅ | ✅ | ✅ | ✅ |
| Chromium | ✅ | ✅ | ✅ | ✅ |
| Microsoft Edge| ✅ | ✅ | ✅ | ✅ |
| 360 极速浏览器 | ✅ | ✅ | ✅ | ✅ |
2021-12-10 03:41:17 +00:00
| QQ | ✅ | ✅ | ✅ | ✅ |
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| OperaGX | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
| Yandex | ✅ | ✅ | ✅ | ✅ |
| CocCoc | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2020-07-23 06:42:32 +00:00
| IE 浏览器 | ❌ | ❌ | ❌ | ❌ |
2021-08-02 11:14:30 +00:00
2021-02-10 16:36:50 +00:00
### MacOS
2020-07-23 06:42:32 +00:00
2020-09-28 09:42:31 +00:00
由于 MacOS 的安全性设置,基于 `Chromium` 内核浏览器解密时**需要当前用户密码**
2020-07-23 06:42:32 +00:00
2021-12-10 03:41:17 +00:00
| 浏览器 | 密码 | Cookie | 书签 | 历史记录 |
| :--- | :------: | :----: | :------: | :-----: |
2020-09-28 09:42:31 +00:00
| Google Chrome | ✅ | ✅ | ✅ | ✅ |
2020-11-17 04:42:17 +00:00
| Google Chrome Beta | ✅ | ✅ | ✅ | ✅ |
2021-01-29 05:02:02 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2020-09-28 09:42:31 +00:00
| Microsoft Edge | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| OperaGX | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
2021-12-10 03:41:17 +00:00
| Yandex | ✅ | ✅ | ✅ | ✅ |
| CocCoc | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2020-10-26 04:39:44 +00:00
| Safari | ❌ | ❌ | ❌ | ❌|
2020-07-23 06:42:32 +00:00
2021-02-10 16:36:50 +00:00
### Linux
2020-07-23 06:42:32 +00:00
2020-11-17 04:42:17 +00:00
| 浏览器 | 密码 | Cookie | 书签 | 历史记录 |
2021-12-10 03:41:17 +00:00
| :----- | :------: | :----: | :------: | :-----: |
2020-07-25 14:20:45 +00:00
| Google Chrome | ✅ | ✅ | ✅ | ✅ |
2020-11-17 04:42:17 +00:00
| Google Chrome Beta | ✅ | ✅ | ✅ | ✅ |
2021-01-29 05:02:02 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2020-10-22 05:20:06 +00:00
| Microsoft Edge | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
2021-01-26 09:54:49 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2020-07-23 06:42:32 +00:00
2021-02-10 16:36:50 +00:00
## 安装运行
### 安装
2020-07-23 06:42:32 +00:00
2021-08-02 11:14:30 +00:00
可下载已编译好,可直接运行的 [二进制文件](https://github.com/moonD4rk/HackBrowserData/releases)
2020-07-23 06:42:32 +00:00
2021-08-02 11:14:30 +00:00
> 某些情况下,这款安全工具会被 Windows Defender 或其他杀毒软件当作病毒导致无法执行。代码已经全部开源,可自行编译。
2020-11-07 17:36:18 +00:00
2021-02-10 16:36:50 +00:00
### 从源码编译
2020-07-23 06:42:32 +00:00
2020-12-20 07:30:24 +00:00
支持版本 `go 1.14+`
2020-07-23 06:42:32 +00:00
2021-08-02 11:14:30 +00:00
``` bash
2020-07-23 06:42:32 +00:00
git clone https://github.com/moonD4rk/HackBrowserData
cd HackBrowserData
go get -v -t -d ./...
go build
```
2021-02-10 16:36:50 +00:00
### 跨平台编译
2020-09-28 09:42:31 +00:00
由于用到了 `go-sqlite3` 库,在跨平台编译时需提前安装支持目标平台的 `GCC` 工具,下面以 `MacOS` 下分别编译 `Windows``Linux` 程序为例:
2021-02-10 16:36:50 +00:00
#### Windows
2020-09-28 09:42:31 +00:00
2021-08-02 11:14:30 +00:00
``` shell
2020-09-28 09:42:31 +00:00
brew install mingw-w64
CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build
```
2021-02-10 16:36:50 +00:00
#### Linux
2020-07-23 06:42:32 +00:00
2021-08-02 11:14:30 +00:00
``` shell
2020-09-28 09:42:31 +00:00
brew install FiloSottile/musl-cross/musl-cross
CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"
```
2021-02-10 16:36:50 +00:00
### 运行
2021-08-02 11:14:30 +00:00
双击直接运行,也可以使用命令行调用相应的命令。
2020-09-28 09:42:31 +00:00
```
2020-07-31 18:37:54 +00:00
PS C:\test> .\hack-browser-data.exe -h
2020-07-23 06:42:32 +00:00
NAME:
hack-browser-data - Export passwords/cookies/history/bookmarks from browser
2020-12-20 07:19:41 +00:00
2020-07-23 06:42:32 +00:00
USAGE:
2020-09-28 09:42:31 +00:00
[hack-browser-data -b chrome -f json -dir results -cc]
2020-07-23 06:42:32 +00:00
Get all data(password/cookie/history/bookmark) from chrome
2020-12-20 07:19:41 +00:00
2020-09-28 09:42:31 +00:00
VERSION:
2021-12-10 03:41:17 +00:00
0.3.7
2020-07-23 06:42:32 +00:00
GLOBAL OPTIONS:
2020-12-20 07:19:41 +00:00
--verbose, --vv verbose (default: false)
--compress, --cc compress result to zip (default: false)
--browser value, -b value available browsers: all|opera|firefox|chrome|edge (default: "all")
--results-dir value, --dir value export dir (default: "results")
--format value, -f value format, csv|json|console (default: "csv")
--profile-dir-path value, -p value custom profile dir path, get with chrome://version
--key-file-path value, -k value custom key file path
--help, -h show help (default: false)
--version, -v print the version (default: false)
2020-07-23 06:42:32 +00:00
2021-08-02 11:14:30 +00:00
PS C:\test> .\hack-browser-data.exe -b all -f json --dir results --cc
2020-07-31 18:37:54 +00:00
[x]: Get 44 cookies, filename is results/microsoft_edge_cookie.json
[x]: Get 54 history, filename is results/microsoft_edge_history.json
[x]: Get 1 passwords, filename is results/microsoft_edge_password.json
[x]: Get 4 bookmarks, filename is results/microsoft_edge_bookmark.json
[x]: Get 6 bookmarks, filename is results/360speed_bookmark.json
[x]: Get 19 cookies, filename is results/360speed_cookie.json
[x]: Get 18 history, filename is results/360speed_history.json
[x]: Get 1 passwords, filename is results/360speed_password.json
[x]: Get 12 history, filename is results/qq_history.json
[x]: Get 1 passwords, filename is results/qq_password.json
[x]: Get 12 bookmarks, filename is results/qq_bookmark.json
[x]: Get 14 cookies, filename is results/qq_cookie.json
[x]: Get 28 bookmarks, filename is results/firefox_bookmark.json
[x]: Get 10 cookies, filename is results/firefox_cookie.json
[x]: Get 33 history, filename is results/firefox_history.json
[x]: Get 1 passwords, filename is results/firefox_password.json
[x]: Get 1 passwords, filename is results/chrome_password.json
[x]: Get 4 bookmarks, filename is results/chrome_bookmark.json
[x]: Get 6 cookies, filename is results/chrome_cookie.json
[x]: Get 6 history, filename is results/chrome_history.json
2020-08-07 03:49:57 +00:00
[x]: Compress success, zip filename is results/archive.zip
2020-07-23 06:42:32 +00:00
```
2021-07-04 09:34:26 +00:00
### 基于此工具的一些其他项目
[Sharp-HackBrowserData](https://github.com/S3cur3Th1sSh1t/Sharp-HackBrowserData)
2021-12-10 03:41:17 +00:00
2021-07-04 09:34:26 +00:00
[Reflective-HackBrowserData](https://github.com/idiotc4t/Reflective-HackBrowserData)
2021-02-10 16:36:50 +00:00
## Contributors
2020-12-20 07:19:41 +00:00
2021-08-02 11:14:30 +00:00
![贡献者](/CONTRIBUTORS.svg)
2020-12-20 07:19:41 +00:00
2021-02-10 16:36:50 +00:00
## 404StarLink 2.0 - Galaxy
2021-12-10 03:41:17 +00:00
`HackBrowserData` 是 404Team [星链计划2.0](https://github.com/knownsec/404StarLink2.0-Galaxy) 中的一环,如果对 HackBrowserData 有任何疑问又或是想要找小伙伴交流,可以参考[星链计划的加群方式](https://github.com/knownsec/404StarLink2.0-Galaxy#community)。
2020-12-29 08:25:30 +00:00
2021-12-10 03:41:17 +00:00
<a href="https://github.com/knownsec/404StarLink2.0-Galaxy" target="_blank"><img src="https://raw.githubusercontent.com/knownsec/404StarLink-Project/master/logo.png" align="middle"/></a>
2020-07-23 06:42:32 +00:00
## JetBrains 开源证书支持
2021-12-10 03:41:17 +00:00
`HackBrowserData` 项目一直以来都是在 JetBrains 公司旗下的 `GoLand` 集成开发环境中进行开发,基于 **free JetBrains Open Source license(s)** 正版免费授权,在此表达我的谢意。
2020-07-23 06:42:32 +00:00
2021-12-10 03:41:17 +00:00
<a href="https://www.jetbrains.com/?from=HackBrowserData" target="_blank"><img src="https://raw.githubusercontent.com/moonD4rk/staticfiles/master/picture/jetbrains-variant-4.png" width="256" align="middle"/></a>