Hack Browser Data

Stella Sebastian
Posted by Stella Sebastian April 16, 2022

superior_hosting_service

Hack

Decrypt passwords, cookies, history, bookmarks from the browser.

HackBrowserData is an open-source tool that could help you decrypt data ( password|bookmark|cookie|history|credit card|downloads link ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.

Disclaimer: This tool is limited to security research only, and the user assumes all legal and related responsibilities arising from its use! The author assumes no legal responsibility!

Supported Browser

Windows

BrowserPasswordCookieBookmarkHistory
Google Chrome✅✅✅✅
Google Chrome Beta✅✅✅✅
Chromium✅✅✅✅
Microsoft Edge✅✅✅✅
360 Speed✅✅✅✅
QQ✅✅✅✅
Brave✅✅✅✅
Opera✅✅✅✅
OperaGX✅✅✅✅
Vivaldi✅✅✅✅
Yandex✅✅✅✅
CocCoc✅✅✅✅
Firefox✅✅✅✅
Firefox Beta✅✅✅✅
Firefox Dev✅✅✅✅
Firefox ESR✅✅✅✅
Firefox Nightly✅✅✅✅
Internet Explorer❌❌❌❌

MacOS

Based on Apple’s security policy, some browsers require a current user password to decrypt.

BrowserPasswordCookieBookmarkHistory
Google Chrome✅✅✅✅
Google Chrome Beta✅✅✅✅
Chromium✅✅✅✅
Microsoft Edge✅✅✅✅
Brave✅✅✅✅
Opera✅✅✅✅
OperaGX✅✅✅✅
Vivaldi✅✅✅✅
Yandex✅✅✅✅
CocCoc✅✅✅✅
Firefox✅✅✅✅
Firefox Beta✅✅✅✅
Firefox Dev✅✅✅✅
Firefox ESR✅✅✅✅
Firefox Nightly✅✅✅✅
Safari❌❌❌❌

Linux

BrowserPasswordCookieBookmarkHistory
Google Chrome✅✅✅✅
Google Chrome Beta✅✅✅✅
Chromium✅✅✅✅
Microsoft Edge Dev✅✅✅✅
Brave✅✅✅✅
Opera✅✅✅✅
Vivaldi✅✅✅✅
Firefox✅✅✅✅
Firefox Beta✅✅✅✅
Firefox Dev✅✅✅✅
Firefox ESR✅✅✅✅
Firefox Nightly✅✅✅✅

Getting started

Install

Installation of HackBrowserData is dead-simple, just download the release for your system and run the binary.

https://github.com/moonD4rk/HackBrowserData/releases

In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed. The code is all open source, you can modify and compile by yourself.

Building from source

support go 1.14+

git clone https://github.com/moonD4rk/HackBrowserData
cd HackBrowserData
go build

Cross compile

Need install target OS’s gcc library, here’s an example of use Mac building for Windows and Linux

For Windows

brew install mingw-w64
CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build

For Linux

brew install FiloSottile/musl-cross/musl-cross
CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"

Run

You can double-click to run, or use command line.

PS C:\test> .\hack-browser-data.exe -h
NAME:
   hack-browser-data - Export passwords/cookies/history/bookmarks from browser

USAGE:
   [hack-browser-data -b chrome -f json -dir results -cc]
   Get all data(password/cookie/history/bookmark) from chrome

VERSION:
   0.3.7
GLOBAL OPTIONS:
   --verbose, --vv                     verbose (default: false)
   --compress, --cc                    compress result to zip (default: false)
   --browser value, -b value           available browsers: all|opera|firefox|chrome|edge (default: "all")
   --results-dir value, --dir value    export dir (default: "results")
   --format value, -f value            format, csv|json|console (default: "csv")
   --profile-dir-path value, -p value  custom profile dir path, get with chrome://version
   --key-file-path value, -k value     custom key file path
   --help, -h                          show help (default: false)
   --version, -v                       print the version (default: false)

PS C:\test>  .\hack-browser-data.exe -b all -f json --dir results -cc
[x]:  Get 44 cookies, filename is results/microsoft_edge_cookie.json
[x]:  Get 54 history, filename is results/microsoft_edge_history.json
[x]:  Get 1 passwords, filename is results/microsoft_edge_password.json
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.json
[x]:  Get 6 bookmarks, filename is results/360speed_bookmark.json
[x]:  Get 19 cookies, filename is results/360speed_cookie.json
[x]:  Get 18 history, filename is results/360speed_history.json
[x]:  Get 1 passwords, filename is results/360speed_password.json
[x]:  Get 12 history, filename is results/qq_history.json
[x]:  Get 1 passwords, filename is results/qq_password.json
[x]:  Get 12 bookmarks, filename is results/qq_bookmark.json
[x]:  Get 14 cookies, filename is results/qq_cookie.json
[x]:  Get 28 bookmarks, filename is results/firefox_bookmark.json
[x]:  Get 10 cookies, filename is results/firefox_cookie.json
[x]:  Get 33 history, filename is results/firefox_history.json
[x]:  Get 1 passwords, filename is results/firefox_password.json
[x]:  Get 1 passwords, filename is results/chrome_password.json
[x]:  Get 4 bookmarks, filename is results/chrome_bookmark.json
[x]:  Get 6 cookies, filename is results/chrome_cookie.json
[x]:  Get 6 history, filename is results/chrome_history.json
[x]:  Compress success, zip filename is results/archive.zip

Run with custom browser profile path

PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default' -k 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Local State'

[x]:  Get 29 history, filename is results/microsoft_edge_history.csv
[x]:  Get 0 passwords, filename is results/microsoft_edge_password.csv
[x]:  Get 1 credit cards, filename is results/microsoft_edge_credit.csv
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.csv
[x]:  Get 54 cookies, filename is results/microsoft_edge_cookie.csv


PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default'

[x]:  Get 1 credit cards, filename is results/microsoft_edge_credit.csv
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.csv
[x]:  Get 54 cookies, filename is results/microsoft_edge_cookie.csv
[x]:  Get 29 history, filename is results/microsoft_edge_history.csv
[x]:  Get 0 passwords, filename is results/microsoft_edge_password.csv

The Hack Browser Data is a github repository by ᴍᴏᴏɴD4ʀᴋ

Source from
CVE-2022-21907

Tags: