HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

13,886

1,756

13,886

View on GitHub

Top Related Projects

firefox_decrypt

2,415

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

hindsight

1,422

Browser forensics tool for Google Chrome (and other Chromium-based browsers)

Quick Overview

HackBrowserData is an open-source tool designed to decrypt and extract sensitive data from web browsers. It supports multiple browsers across different operating systems, allowing users to recover passwords, cookies, bookmarks, and history.

Pros

Cross-platform support (Windows, macOS, Linux)
Supports multiple popular browsers (Chrome, Edge, Firefox, etc.)
Exports data in various formats (CSV, JSON, SQLite3)
Active development and regular updates

Cons

Potential for misuse in unethical or illegal activities
May be flagged by antivirus software as a potential threat
Requires elevated privileges to access browser data
Limited documentation for advanced usage scenarios

Code Examples

// Initialize a new browser instance
browser := core.NewBrowser("chrome", "", true)

// Decrypt and retrieve passwords
passwords, err := browser.GetPasswords()
if err != nil {
    log.Fatal(err)
}

// Print decrypted passwords
for _, password := range passwords {
    fmt.Printf("URL: %s, Username: %s, Password: %s\n", password.URL, password.Username, password.Password)
}

// Export browser data to JSON file
exporter := export.NewJSONExporter("output.json")
err := exporter.Export(browser.GetAllData())
if err != nil {
    log.Fatal(err)
}

// Retrieve and print browser history
history, err := browser.GetHistory()
if err != nil {
    log.Fatal(err)
}

for _, entry := range history {
    fmt.Printf("Title: %s, URL: %s, Visit Count: %d\n", entry.Title, entry.URL, entry.VisitCount)
}

Getting Started

To use HackBrowserData, follow these steps:

Install Go (version 1.19 or later)

Clone the repository:

git clone https://github.com/moonD4rk/HackBrowserData.git

Build the project:
```
cd HackBrowserData
go build
```
Run the tool:
```
./hack-browser-data
```

For more detailed usage instructions and options, refer to the project's README file on GitHub.

Competitor Comparisons

firefox_decrypt

2,415

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

Pros of firefox_decrypt

Focused specifically on Firefox, providing deep expertise for this browser
Lightweight and simple to use, with minimal dependencies
Supports multiple Firefox-based browsers (e.g., Thunderbird, SeaMonkey)

Cons of firefox_decrypt

Limited to Firefox and related browsers, unlike HackBrowserData's multi-browser support
Lacks a graphical user interface, which HackBrowserData provides
Does not offer additional features like cookie extraction or history retrieval

Code Comparison

firefox_decrypt:

def decrypt_passwords(profile, password=None):
    """Decrypt requested profile using the provided password"""
    if password:
        credentials.key = credentials.key3_decrypt(password)

    logins = credentials.decrypt_passwords(profile)
    return logins

HackBrowserData:

func DecryptChromePassword(encryptPass []byte) (string, error) {
    if len(encryptPass) > 3 && bytes.Equal(encryptPass[:3], []byte("v10")) {
        return decryptAES256GCM(encryptPass[3:])
    }
    return string(encryptPass), nil
}

Both projects focus on decrypting browser data, but firefox_decrypt is tailored specifically for Firefox-based browsers, while HackBrowserData offers a more comprehensive solution for multiple browsers. The code snippets demonstrate the different approaches and languages used in each project.

hindsight

1,422

Browser forensics tool for Google Chrome (and other Chromium-based browsers)

Error generating comparison

Convert designs to code with AI

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README

HackBrowserData

HackBrowserData is a command-line tool for decrypting and exporting browser data (passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions) from the browser. It supports the most popular Chromium-based browsers and Firefox on Windows, macOS and Linux, plus Safari on macOS.

Disclaimer: This tool is only intended for security research. Users are responsible for all legal and related liabilities resulting from the use of this tool. The original author does not assume any legal responsibility.

Supported Data Categories

Category	Chromium-based	Firefox	Safari
Password	â	â	â
Cookie	â	â	â
Bookmark	â	â	â
History	â	â	â
Download	â	â	â
Credit Card	â	-	-
Extension	â	â	â
LocalStorage	â	â	â
SessionStorage	â	-	-

Supported Browsers

On macOS, some Chromium-based browsers require a current user password to decrypt.

Password decryption may fail on macOS 26.4 or later.

Browser	Windows	macOS	Linux
Chrome	âÂ²	â	â
Chrome Beta	âÂ²	â	â
Chromium	â	â	â
Edge	âÂ²	â	â
Brave	âÂ²	â	â
Opera	â	â	â
OperaGX	â	â	-
Vivaldi	â	â	â
Yandex	â	â	-
CocCoc	âÂ²	â	-
Arc	-	â	-
DuckDuckGo	â	-	-
QQ	â	-	-
360 ChromeX	â	-	-
360 Chrome	â	-	-
DC Browser	â	-	-
Sogou Explorer	â	-	-
Firefox	â	â	â
SafariÂ¹	-	â	-

Â¹ Safari requires Full Disk Access; enable it in System Settings â Privacy & Security â Full Disk Access if extraction returns empty results.

Â² On Windows, decrypting Chromium 127+ cookies (Chrome / Chrome Beta / Edge / Brave / CocCoc) requires the App-Bound Encryption payload built via make build-windows â see Building from source below.

Getting Started

Install

Installation of HackBrowserData is dead-simple, just download the release for your system and run the binary.

In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.

Building from source

Requires Go 1.20+.

git clone https://github.com/moonD4rk/HackBrowserData
cd HackBrowserData
go build ./cmd/hack-browser-data/

Cross-platform build

# For Windows (standard build, no Chromium 127+ ABE cookie support)
GOOS=windows GOARCH=amd64 go build ./cmd/hack-browser-data/

# For Linux
GOOS=linux GOARCH=amd64 go build ./cmd/hack-browser-data/

Windows build with App-Bound Encryption (optional)

Chrome / Chrome Beta / Edge / Brave / CocCoc 127+ protect cookies with App-Bound Encryption. Decrypting those cookies requires a small C payload â Zig (0.13+) is the recommended C toolchain (the Makefile calls zig cc). MinGW-w64 gcc can also build the sources manually if you bypass make payload.

# 1. Install Zig
brew install zig                 # macOS
scoop install zig                # Windows (scoop)
# or download from https://ziglang.org/download/

# 2. Build the payload (outputs crypto/windows/payload/abe_extractor_amd64.bin)
make payload

# 3. Build hack-browser-data.exe with the ABE payload embedded
make build-windows

The resulting hack-browser-data.exe includes full ABE cookie decryption on Chromium 127+.

Usage

$ hack-browser-data -h
hack-browser-data decrypts and exports browser data from Chromium-based
browsers and Firefox on Windows, macOS, and Linux.

GitHub: https://github.com/moonD4rk/HackBrowserData

Usage:
  hack-browser-data [flags]
  hack-browser-data [command]

Available Commands:
  dump        Extract and decrypt browser data (default command)
  help        Help about any command
  list        List detected browsers and profiles
  version     Print version information

Flags:
  -b, --browser string        target browser: all|chrome|firefox|edge|... (default "all")
  -c, --category string       data categories (comma-separated): all|password,cookie,... (default "all")
  -d, --dir string            output directory (default "results")
  -f, --format string         output format: csv|json|cookie-editor (default "csv")
  -h, --help                  help for hack-browser-data
      --keychain-pw string    macOS keychain password
  -p, --profile-path string   custom profile dir path, get with chrome://version
  -v, --verbose               enable debug logging
      --zip                   compress output to zip

Use "hack-browser-data [command] --help" for more information about a command.

`dump` - Extract and decrypt browser data (default)

Running hack-browser-data without a subcommand defaults to dump.

Flag	Short	Default	Description
`--browser`	`-b`	`all`	Target browser (all\|chrome\|firefox\|edge\|...)
`--category`	`-c`	`all`	Data categories, comma-separated (all\|password\|cookie\|bookmark\|history\|download\|creditcard\|extension\|localstorage\|sessionstorage)
`--format`	`-f`	`csv`	Output format (csv\|json\|cookie-editor)
`--dir`	`-d`	`results`	Output directory
`--profile-path`	`-p`		Custom profile dir path, get with chrome://version
`--keychain-pw`			macOS keychain password
`--zip`		`false`	Compress output to zip

`list` - List detected browsers and profiles

Flag	Default	Description
`--detail`	`false`	Show per-category entry counts

`version` - Print version information

hack-browser-data version

Global flags

Flag	Short	Description
`--verbose`	`-v`	Enable debug logging

Examples

# Extract all data from all browsers (default)
hack-browser-data

# Extract specific browser and categories
hack-browser-data dump -b chrome -c password,cookie

# Export in JSON format to a custom directory
hack-browser-data dump -b chrome -f json -d output

# Export cookies in CookieEditor format
hack-browser-data dump -f cookie-editor

# Compress output to zip
hack-browser-data dump --zip

# List detected browsers and profiles
hack-browser-data list

# List with per-category entry counts
hack-browser-data list --detail

# Use custom profile path
hack-browser-data dump -b chrome -p "/path/to/User Data/Default"

Contributing

We welcome and appreciate any contributions made by the community (GitHub issues/pull requests, email feedback, etc.).

Please see the Contribution Guide before contributing.

Contributors

_Roger	_{Aquilao Official}	_uinfziuna8n	_Cyrus	_stevenlele	_{Carlo Mandelli}
_slimwang	_Amir.	_a-urth	_{Ciprian Conache}	_{Santiago Ramirez}	_beichen
_guoguangwu	_zhe6652	_LC	_mirefly	_YuXJ	_zznQ

Stargazers over time

404StarLink 2.0 - Galaxy

HackBrowserData is a part of 404Team StarLink-Galaxy, if you have any questions about HackBrowserData or want to find a partner to communicate with, please refer to the Starlink group.

JetBrains OS licenses

HackBrowserData had been being developed with GoLand IDE under the free JetBrains Open Source license(s) granted by JetBrains s.r.o., hence I would like to express my thanks here.

Top Related Projects

firefox_decrypt

2,415

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

hindsight

1,422

Browser forensics tool for Google Chrome (and other Chromium-based browsers)

Convert designs to code with AI

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

HackBrowserData

Top Related Projects

firefox_decrypt

hindsight

Quick Overview

Pros

Cons

Code Examples

Getting Started

Competitor Comparisons

firefox_decrypt

Pros of firefox_decrypt

Cons of firefox_decrypt

Code Comparison

hindsight

Convert designs to code with AI

README

HackBrowserData

Supported Data Categories

Supported Browsers

Getting Started

Install

Building from source

Cross-platform build

Windows build with App-Bound Encryption (optional)

Usage

dump - Extract and decrypt browser data (default)

list - List detected browsers and profiles

version - Print version information

Global flags

Examples

Contributing

Contributors

Stargazers over time

404StarLink 2.0 - Galaxy

JetBrains OS licenses

Top Related Projects

firefox_decrypt

hindsight

Convert designs to code with AI

`dump` - Extract and decrypt browser data (default)

`list` - List detected browsers and profiles

`version` - Print version information