• Stars
    star
    137
  • Rank 266,121 (Top 6 %)
  • Language
    Go
  • Created over 3 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

HackBrowserData的反射模块

HackBrowserData

CI Build Hack-Browser-Data Release

中文说明

hack-browser-data is an open-source tool that could help you decrypt data ( password|bookmark|cookie|history|credit card|downloads link ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux.

Statement: This tool is limited to security research only, and the user assumes all legal and related responsibilities arising from its use! The author assumes no legal responsibility!

Supported Browser

Windows

Browser Password Cookie Bookmark History
Google Chrome
Google Chrome Beta
Chromium
Microsoft Edge
360 Speed
QQ
Brave
Opera
OperaGX
Vivaldi
Firefox
Firefox Beta
Firefox Dev
Firefox ESR
Firefox Nightly
Internet Explorer

MacOS

Based on Apple's security policy, some browsers require a current user password to decrypt.

Browser Password Cookie Bookmark History
Google Chrome
Google Chrome Beta
Chromium
Microsoft Edge
Brave
Opera
OperaGX
Vivaldi
Firefox
Firefox Beta
Firefox Dev
Firefox ESR
Firefox Nightly
Safari

Linux

Browser Password Cookie Bookmark History
Google Chrome
Google Chrome Beta
Chromium
Microsoft Edge Dev
Brave
Opera
Vivaldi
Firefox
Firefox Beta
Firefox Dev
Firefox ESR
Firefox Nightly

Getting started

Install

Installation of hack-browser-data is dead-simple, just download the release for your system and run the binary.

In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed, after version 0.2.6 will use UPX try to simply bypass, then no longer with antivirus software to do unnecessary security confrontations.The code is all open source, you can modify and compile by yourself.

Building from source

support go 1.14+

git clone https://github.com/moonD4rk/HackBrowserData

cd HackBrowserData

go get -v -t -d ./...

go build

Cross compile

Need install target OS's gcc library, here's an example of use Mac building for Windows and Linux

For Windows

brew install mingw-w64

CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build

For Linux

brew install FiloSottile/musl-cross/musl-cross

CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"

Run

You can double-click to run, or use command line.

PS C:\test> .\hack-browser-data.exe -h
NAME:
   hack-browser-data - Export passwords/cookies/history/bookmarks from browser

USAGE:
   [hack-browser-data -b chrome -f json -dir results -cc]
   Get all data(password/cookie/history/bookmark) from chrome

VERSION:
   0.3.5
GLOBAL OPTIONS:
   --verbose, --vv                     verbose (default: false)
   --compress, --cc                    compress result to zip (default: false)
   --browser value, -b value           available browsers: all|opera|firefox|chrome|edge (default: "all")
   --results-dir value, --dir value    export dir (default: "results")
   --format value, -f value            format, csv|json|console (default: "csv")
   --profile-dir-path value, -p value  custom profile dir path, get with chrome://version
   --key-file-path value, -k value     custom key file path
   --help, -h                          show help (default: false)
   --version, -v                       print the version (default: false)

PS C:\test>  .\hack-browser-data.exe -b all -f json --dir results -cc
[x]:  Get 44 cookies, filename is results/microsoft_edge_cookie.json
[x]:  Get 54 history, filename is results/microsoft_edge_history.json
[x]:  Get 1 passwords, filename is results/microsoft_edge_password.json
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.json
[x]:  Get 6 bookmarks, filename is results/360speed_bookmark.json
[x]:  Get 19 cookies, filename is results/360speed_cookie.json
[x]:  Get 18 history, filename is results/360speed_history.json
[x]:  Get 1 passwords, filename is results/360speed_password.json
[x]:  Get 12 history, filename is results/qq_history.json
[x]:  Get 1 passwords, filename is results/qq_password.json
[x]:  Get 12 bookmarks, filename is results/qq_bookmark.json
[x]:  Get 14 cookies, filename is results/qq_cookie.json
[x]:  Get 28 bookmarks, filename is results/firefox_bookmark.json
[x]:  Get 10 cookies, filename is results/firefox_cookie.json
[x]:  Get 33 history, filename is results/firefox_history.json
[x]:  Get 1 passwords, filename is results/firefox_password.json
[x]:  Get 1 passwords, filename is results/chrome_password.json
[x]:  Get 4 bookmarks, filename is results/chrome_bookmark.json
[x]:  Get 6 cookies, filename is results/chrome_cookie.json
[x]:  Get 6 history, filename is results/chrome_history.json
[x]:  Compress success, zip filename is results/archive.zip

Run with custom browser profile path

PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default' -k 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Local State'

[x]:  Get 29 history, filename is results/microsoft_edge_history.csv
[x]:  Get 0 passwords, filename is results/microsoft_edge_password.csv
[x]:  Get 1 credit cards, filename is results/microsoft_edge_credit.csv
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.csv
[x]:  Get 54 cookies, filename is results/microsoft_edge_cookie.csv


PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default'

[x]:  Get 1 credit cards, filename is results/microsoft_edge_credit.csv
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.csv
[x]:  Get 54 cookies, filename is results/microsoft_edge_cookie.csv
[x]:  Get 29 history, filename is results/microsoft_edge_history.csv
[x]:  Get 0 passwords, filename is results/microsoft_edge_password.csv

Contributors

404StarLink 2.0 - Galaxy

HackBrowserData is a part of 404Team StarLink-Galaxy, if you have any questions about HackBrowserData or want to find a partner to communicate with,please refer to the Starlink group.

TODO

Desktop Browser Market Share Worldwide

Chrome Safari Firefox Edge Legacy IE Other
68.33% 9.4% 8.91% 4.41% 3% 3%

Desktop Browser Market Share China

Chrome 360 Safe Firefox QQ Browser IE Sogou Explorer
39.85% 22.26% 9.28% 6.5% 5.65% 4.74%
  • Chrome
  • QQ browser
  • Edge
  • 360 speed browser
  • Firefox
  • Safari
  • IE

More Repositories

1

GetSystemEarlyBird

这是一个直接取得系统权限的项目
C++
41
star
2

Schrodinger-s-Cat

Shellcode antivirus evasion framework
Python
27
star
3

ObfuscationStrings-new

C++
26
star
4

Mapping-injection

NO WriteProcessMemory CreateRemoteThread APIs call shellcode injection
C++
25
star
5

GetSystemDumpHash

优化了GetSystemEarlyBird的代码结构
C++
17
star
6

ReflectiveBase64DLL

This is a project to receive Base64 data and decode it in process
C++
14
star
7

gitbook

14
star
8

ProcessHollow

C++
12
star
9

FakePPID

C++
11
star
10

RandomInjector

This is a random process injector, and more injection techniques will be added in the future.
C++
10
star
11

SimpleService

C++
8
star
12

sesion0

C
7
star
13

SamApiAddUser

C
7
star
14

FodhelperBypassUAC

C++
7
star
15

ReflectiveDllPatch

C
5
star
16

CreateRemoteThread

C++
5
star
17

MemoryPatchBypassAMSI

C++
4
star
18

EunmRWXinject

C++
4
star
19

TlsCallbackShellcode

C++
4
star
20

ssi

C++
3
star
21

TokenAttack

C++
3
star
22

OffsetTablesShellcode

C++
3
star
23

SehShellcode

C++
3
star
24

Laplace-s-Devil

Laplace's Devil is a reflection loading framework
Assembly
3
star
25

ApcInject

C++
3
star
26

SplitInjection

C++
3
star
27

HideModule

C++
2
star
28

ReloadDll

C++
2
star
29

ApiAddUSer

C++
2
star
30

combypassuac

C++
2
star
31

StartupHkey

C++
2
star
32

GlobalHool

dll延迟释放和全局钩子的demo l和k离得有点近
C++
2
star
33

FakeCommandLine

C
2
star
34

apcthreadhijack

C++
2
star
35

FuckEventProcess

end the eventlog service threads
C++
2
star
36

RecvShellcode

C++
2
star
37

MemoryPatchBypassETW

2
star
38

HostingCLR

C++
2
star
39

Dll-Hollowing

C++
2
star
40

TwoDll

C++
1
star
41

OffsetShellcode

Python
1
star
42

Rid-Hijack

C++
1
star
43

CreateThreadAPC

C++
1
star
44

ThreadHijack

C++
1
star
45

DisplayInstalledSoft

C++
1
star