HackBrowserData/README.md

197 lines
9.8 KiB
Markdown
Raw Normal View History

2022-04-25 10:24:49 +00:00
<div align="center">
2022-04-25 10:29:19 +00:00
<img src="LOGO.svg" alt="hack-browser-data logo" />
2022-04-25 10:27:38 +00:00
</div>
2022-04-25 10:24:49 +00:00
2020-06-19 12:43:31 +00:00
# HackBrowserData
2022-08-14 15:38:26 +00:00
[![Lint](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/lint.yml) [![build](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/build.yml) [![Release](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml/badge.svg)](https://github.com/moonD4rk/HackBrowserData/actions/workflows/release.yml)
2020-10-26 04:39:44 +00:00
2020-09-28 09:42:31 +00:00
[中文说明](https://github.com/moonD4rk/HackBrowserData/blob/master/README_ZH.md)
2020-07-23 06:45:25 +00:00
2022-04-29 16:50:49 +00:00
`HackBrowserData` is an open-source tool that could help you decrypt data ( password|bookmark|cookie|history|credit card|download|localStorage|extension ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.
2020-06-19 12:43:31 +00:00
2021-12-10 03:41:17 +00:00
> Disclaimer: This tool is limited to security research only, and the user assumes all legal and related responsibilities arising from its use! The author assumes no legal responsibility!
2020-10-22 05:20:06 +00:00
2021-02-10 16:36:50 +00:00
## Supported Browser
2020-06-25 06:36:59 +00:00
2021-02-10 16:36:50 +00:00
### Windows
2020-07-23 06:42:32 +00:00
| Browser | Password | Cookie | Bookmark | History |
| :---------------------------------- | :------: | :----: | :------: | :-----: |
2020-09-28 09:42:31 +00:00
| Google Chrome | ✅ | ✅ | ✅ | ✅ |
2020-11-17 04:42:17 +00:00
| Google Chrome Beta | ✅ | ✅ | ✅ | ✅ |
2021-01-29 05:02:02 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2020-07-23 06:42:32 +00:00
| Microsoft Edge | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| 360 Speed | ✅ | ✅ | ✅ | ✅ |
| QQ | ✅ | ✅ | ✅ | ✅ |
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| OperaGX | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
2021-12-10 03:41:17 +00:00
| Yandex | ✅ | ✅ | ✅ | ✅ |
| CocCoc | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2020-07-23 06:42:32 +00:00
| Internet Explorer | ❌ | ❌ | ❌ | ❌ |
2020-07-09 08:49:35 +00:00
2020-12-03 00:52:18 +00:00
2021-02-10 16:36:50 +00:00
### MacOS
2020-07-09 08:49:35 +00:00
2020-09-28 09:42:31 +00:00
Based on Apple's security policy, some browsers **require a current user password** to decrypt.
2020-07-09 08:49:35 +00:00
2020-07-23 06:42:32 +00:00
| Browser | Password | Cookie | Bookmark | History |
2021-12-10 03:41:17 +00:00
| :------- | :------: | :----: | :------: | :-----: |
2020-09-28 09:42:31 +00:00
| Google Chrome | ✅ | ✅ | ✅ | ✅ |
2020-11-17 04:42:17 +00:00
| Google Chrome Beta | ✅ | ✅ | ✅ | ✅ |
2021-01-29 05:02:02 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2020-09-28 09:42:31 +00:00
| Microsoft Edge | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| OperaGX | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
2021-12-10 03:41:17 +00:00
| CocCoc | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2022-04-17 18:07:31 +00:00
| Yandex | ✅ | ✅ | ✅ | ✅ |
2020-07-23 06:42:32 +00:00
| Safari | ❌ | ❌ | ❌ | ❌ |
2020-07-09 08:49:35 +00:00
2021-02-10 16:36:50 +00:00
### Linux
2020-07-09 08:49:35 +00:00
2020-07-23 06:42:32 +00:00
| Browser | Password | Cookie | Bookmark | History |
2021-12-10 03:41:17 +00:00
| :---- | :------: | :----: | :------: | :-----: |
2020-07-25 14:20:45 +00:00
| Google Chrome | ✅ | ✅ | ✅ | ✅ |
2020-11-17 04:42:17 +00:00
| Google Chrome Beta | ✅ | ✅ | ✅ | ✅ |
2021-01-29 05:02:02 +00:00
| Chromium | ✅ | ✅ | ✅ | ✅ |
2020-10-22 05:20:06 +00:00
| Microsoft Edge Dev | ✅ | ✅ | ✅ | ✅ |
2021-02-10 16:36:50 +00:00
| Brave | ✅ | ✅ | ✅ | ✅ |
| Opera | ✅ | ✅ | ✅ | ✅ |
| Vivaldi | ✅ | ✅ | ✅ | ✅ |
| Firefox | ✅ | ✅ | ✅ | ✅ |
| Firefox Beta | ✅ | ✅ | ✅ | ✅ |
| Firefox Dev | ✅ | ✅ | ✅ | ✅ |
| Firefox ESR | ✅ | ✅ | ✅ | ✅ |
| Firefox Nightly | ✅ | ✅ | ✅ | ✅ |
2020-07-09 08:49:35 +00:00
2021-02-10 16:36:50 +00:00
## Getting started
2020-06-30 04:01:00 +00:00
2020-07-23 06:42:32 +00:00
### Install
2020-06-30 04:01:00 +00:00
2021-12-10 03:41:17 +00:00
Installation of `HackBrowserData` is dead-simple, just download [the release for your system](https://github.com/moonD4rk/HackBrowserData/releases) and run the binary.
2020-06-30 04:01:00 +00:00
2021-07-04 09:34:26 +00:00
> In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.
2020-11-07 17:36:18 +00:00
2021-02-10 16:36:50 +00:00
### Building from source
2020-06-25 06:36:59 +00:00
2022-04-17 18:07:31 +00:00
only support `go 1.18+` with go generics
2020-07-10 03:29:03 +00:00
2020-06-25 06:47:46 +00:00
```bash
2022-04-17 18:07:31 +00:00
$ git clone https://github.com/moonD4rk/HackBrowserData
2020-06-25 06:47:46 +00:00
2022-04-17 18:07:31 +00:00
$ cd HackBrowserData/cmd/hack-browser-data
2020-07-10 03:29:03 +00:00
2022-04-17 18:07:31 +00:00
$ CGO_ENABLED=1 go build
2020-06-25 06:47:46 +00:00
```
2020-06-25 06:36:59 +00:00
2021-02-10 16:36:50 +00:00
### Cross compile
2020-09-28 09:42:31 +00:00
2020-10-26 04:39:44 +00:00
Need install target OS's `gcc` library, here's an example of use `Mac` building for `Windows` and `Linux`
2020-09-28 09:42:31 +00:00
2021-02-10 16:36:50 +00:00
#### For Windows
2020-06-25 06:36:59 +00:00
2020-06-28 13:17:28 +00:00
```shell
2020-09-28 09:42:31 +00:00
brew install mingw-w64
2022-04-19 11:35:30 +00:00
CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC=x86_64-w64-mingw32-gcc go build
2020-09-28 09:42:31 +00:00
```
2021-02-10 16:36:50 +00:00
#### For Linux
2020-09-28 09:42:31 +00:00
````shell
brew install FiloSottile/musl-cross/musl-cross
CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"
````
2021-02-10 16:36:50 +00:00
### Run
2020-09-28 09:42:31 +00:00
You can double-click to run, or use command line.
```
2020-07-31 18:37:54 +00:00
PS C:\test> .\hack-browser-data.exe -h
2020-07-23 06:20:06 +00:00
NAME:
hack-browser-data - Export password|bookmark|cookie|history|credit card|download|localStorage|extension from browser
2020-12-20 07:19:41 +00:00
2020-06-28 09:30:02 +00:00
USAGE:
2020-09-28 09:42:31 +00:00
[hack-browser-data -b chrome -f json -dir results -cc]
2022-04-17 18:07:31 +00:00
Export all browingdata(password/cookie/history/bookmark) from browser
Github Link: https://github.com/moonD4rk/HackBrowserData
2020-12-20 07:19:41 +00:00
2020-06-25 06:36:59 +00:00
GLOBAL OPTIONS:
2022-04-17 18:07:31 +00:00
--verbose, --vv verbose (default: false)
--compress, --zip compress result to zip (default: false)
--browser value, -b value available browsers: all|chrome|opera-gx|vivaldi|coccoc|brave|edge|chromium|chrome-beta|opera|yandex|firefox (default: "all")
--results-dir value, --dir value export dir (default: "results")
--format value, -f value file name csv|json (default: "csv")
--profile-path value, -p value custom profile dir path, get with chrome://version
--help, -h show help (default: false)
--version, -v print the version (default: false)
PS C:\test> .\hack-browser-data.exe -b all -f json --dir results -zip
[NOTICE] [browser.go:46,pickChromium] find browser Chrome success
[NOTICE] [browser.go:46,pickChromium] find browser Microsoft Edge success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_download.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_password.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_creditcard.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_bookmark.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_cookie.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/microsoft_edge_history.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_history.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_download.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_password.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_creditcard.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_bookmark.json success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_cookie.json success
2020-12-20 07:19:41 +00:00
```
2022-04-17 18:07:31 +00:00
### Run with custom browser profile folder
2020-12-20 07:19:41 +00:00
2022-04-17 18:07:31 +00:00
```
PS C:\Users\User\Desktop> .\hack-browser-data.exe -b chrome -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default'
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_creditcard.csv success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_bookmark.csv success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_cookie.csv success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_history.csv success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_download.csv success
[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_password.csv success
2020-12-20 07:19:41 +00:00
```
2021-07-04 09:34:26 +00:00
### Some other projects based on HackBrowserData
[Sharp-HackBrowserData](https://github.com/S3cur3Th1sSh1t/Sharp-HackBrowserData)
2021-12-10 03:41:17 +00:00
2021-07-04 09:34:26 +00:00
[Reflective-HackBrowserData](https://github.com/idiotc4t/Reflective-HackBrowserData)
2021-02-10 16:36:50 +00:00
## Contributors
2020-12-20 07:19:41 +00:00
![](/CONTRIBUTORS.svg)
2021-02-10 16:36:50 +00:00
## 404StarLink 2.0 - Galaxy
2021-12-10 03:41:17 +00:00
`HackBrowserData` is a part of 404Team [StarLink-Galaxy](https://github.com/knownsec/404StarLink2.0-Galaxy), if you have any questions about `HackBrowserData` or want to find a partner to communicate withplease refer to the [Starlink group](https://github.com/knownsec/404StarLink2.0-Galaxy#community).
<a href="https://github.com/knownsec/404StarLink2.0-Galaxy" target="_blank"><img src="https://raw.githubusercontent.com/knownsec/404StarLink-Project/master/logo.png" align="middle"/></a>
2020-06-30 04:01:00 +00:00
## JetBrains OS licenses
2021-12-10 03:41:17 +00:00
``HackBrowserData`` had been being developed with `GoLand` IDE under the **free JetBrains Open Source license(s)** granted by JetBrains s.r.o., hence I would like to express my thanks here.
2021-12-10 03:44:41 +00:00
2021-12-10 03:41:17 +00:00
<a href="https://www.jetbrains.com/?from=HackBrowserData" target="_blank"><img src="https://raw.githubusercontent.com/moonD4rk/staticfiles/master/picture/jetbrains-variant-4.png" width="256" align="middle"/></a>
2020-12-20 07:19:41 +00:00