hack-browser-data 是一个解密浏览器数据(密码|||书签)的导出工具,支持全平台主流浏览器。
特别声明:此工具仅限于安全研究,用户承担因使用此工具而导致的所有法律和相关责任!作者不承担任何法律责任!
各平台浏览器支持情况
windows
浏览器 | 密码 | cookie | 书签 | 历史记录 |
---|---|---|---|---|
google chrome | ✅ | ✅ | ✅ | ✅ |
google chrome beta | ✅ | ✅ | ✅ | ✅ |
chromium | ✅ | ✅ | ✅ | ✅ |
firefox | ✅ | ✅ | ✅ | ✅ |
microsoft edge | ✅ | ✅ | ✅ | ✅ |
360 极速浏览器 | ✅ | ✅ | ✅ | ✅ |
qq 浏览器 | ✅ | ✅ | ✅ | ✅ |
brave 浏览器 | ✅ | ✅ | ✅ | ✅ |
opera 浏览器 | ✅ | ✅ | ✅ | ✅ |
operagx 浏览器 | ✅ | ✅ | ✅ | ✅ |
vivaldi 浏览器 | ✅ | ✅ | ✅ | ✅ |
ie 浏览器 | ❌ | ❌ | ❌ | ❌ |
macos
由于 macos 的安全性设置,基于 chromium
内核浏览器解密时需要当前用户密码
浏览器 | 密码 | cookie | 书签 | 历史记录 |
---|---|---|---|---|
google chrome | ✅ | ✅ | ✅ | ✅ |
google chrome beta | ✅ | ✅ | ✅ | ✅ |
chromium | ✅ | ✅ | ✅ | ✅ |
firefox | ✅ | ✅ | ✅ | ✅ |
microsoft edge | ✅ | ✅ | ✅ | ✅ |
brave 浏览器 | ✅ | ✅ | ✅ | ✅ |
opera 浏览器 | ✅ | ✅ | ✅ | ✅ |
operagx 浏览器 | ✅ | ✅ | ✅ | ✅ |
vivaldi 浏览器 | ✅ | ✅ | ✅ | ✅ |
safari | ❌ | ❌ | ❌ | ❌ |
linux
浏览器 | 密码 | cookie | 书签 | 历史记录 |
---|---|---|---|---|
google chrome | ✅ | ✅ | ✅ | ✅ |
google chrome beta | ✅ | ✅ | ✅ | ✅ |
chromium | ✅ | ✅ | ✅ | ✅ |
firefox | ✅ | ✅ | ✅ | ✅ |
microsoft edge | ✅ | ✅ | ✅ | ✅ |
brave 浏览器 | ✅ | ✅ | ✅ | ✅ |
opera browser | ✅ | ✅ | ✅ | ✅ |
vivaldi browser | ✅ | ✅ | ✅ | ✅ |
chromium | ✅ | ✅ | ✅ | ✅ |
安装运行
可下载已编译好,直接运行的
某些情况下,这款安全工具会被 windows defender 或其他杀毒软件当作病毒从而无法执行,0.2.6 版本后将使用 upx 做简单的压缩壳免杀,后续不再提供免杀做无谓的安全对抗。代码已全部开源,可自己修改编译。
自己编译
支持版本 go 1.14
git clone https://github.com/moond4rk/hackbrowserdata
cd hackbrowserdata
go get -v -t -d ./...
go build
跨平台编译
由于用到了 go-sqlite3
库,在跨平台编译时需提前安装支持目标平台的 gcc
工具,下面以 macos
下分别编译 windows
和 linux
程序为例:
windows
brew install mingw-w64
cgo_enabled=1 goos=windows goarch=amd64 cc="x86_64-w64-mingw32-gcc" go build
linux
brew install filosottile/musl-cross/musl-cross
cc=x86_64-linux-musl-gcc cxx=x86_64-linux-musl-g goarch=amd64 goos=linux cgo_enabled=1 go build -ldflags "-linkmode external -extldflags -static"
运行
双击直接运行,也可以命令行调整对应的命令
ps c:\test> .\hack-browser-data.exe -h
name:
hack-browser-data - export passwords/cookies/history/bookmarks from browser
usage:
[hack-browser-data -b chrome -f json -dir results -cc]
get all data(password/cookie/history/bookmark) from chrome
version:
0.3.3
global options:
--verbose, --vv verbose (default: false)
--compress, --cc compress result to zip (default: false)
--browser value, -b value available browsers: all|opera|firefox|chrome|edge (default: "all")
--results-dir value, --dir value export dir (default: "results")
--format value, -f value format, csv|json|console (default: "csv")
--profile-dir-path value, -p value custom profile dir path, get with chrome://version
--key-file-path value, -k value custom key file path
--help, -h show help (default: false)
--version, -v print the version (default: false)
ps c:\test> .\hack-browser-data.exe -b all -f json --dir results -cc
[x]: get 44 cookies, filename is results/microsoft_edge_cookie.json
[x]: get 54 history, filename is results/microsoft_edge_history.json
[x]: get 1 passwords, filename is results/microsoft_edge_password.json
[x]: get 4 bookmarks, filename is results/microsoft_edge_bookmark.json
[x]: get 6 bookmarks, filename is results/360speed_bookmark.json
[x]: get 19 cookies, filename is results/360speed_cookie.json
[x]: get 18 history, filename is results/360speed_history.json
[x]: get 1 passwords, filename is results/360speed_password.json
[x]: get 12 history, filename is results/qq_history.json
[x]: get 1 passwords, filename is results/qq_password.json
[x]: get 12 bookmarks, filename is results/qq_bookmark.json
[x]: get 14 cookies, filename is results/qq_cookie.json
[x]: get 28 bookmarks, filename is results/firefox_bookmark.json
[x]: get 10 cookies, filename is results/firefox_cookie.json
[x]: get 33 history, filename is results/firefox_history.json
[x]: get 1 passwords, filename is results/firefox_password.json
[x]: get 1 passwords, filename is results/chrome_password.json
[x]: get 4 bookmarks, filename is results/chrome_bookmark.json
[x]: get 6 cookies, filename is results/chrome_cookie.json
[x]: get 6 history, filename is results/chrome_history.json
[x]: compress success, zip filename is results/archive.zip
原创文章,作者:校长,如若转载,请注明出处:https://www.yundongfang.com/yun35145.html