Skip to content

Latest commit

 

History

History
193 lines (149 loc) · 8.34 KB

README_ZH.md

File metadata and controls

193 lines (149 loc) · 8.34 KB
Raw

HackBrowserData

hack-browser-data 是一个浏览器数据（密码 | 历史记录 | Cookie | 书签 | 信用卡 | 下载记录）的导出工具，支持全平台主流浏览器。

特别声明：此工具仅限于安全研究，用户承担因使用此工具而导致的所有法律和相关责任！作者不承担任何法律责任！

各平台浏览器支持情况

Windows

浏览器 密码 Cookie 书签 历史记录
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge ✅ ✅ ✅ ✅
360 极速浏览器 ✅ ✅ ✅ ✅
QQ 浏览器 ✅ ✅ ✅ ✅
Brave 浏览器 ✅ ✅ ✅ ✅
Opera 浏览器 ✅ ✅ ✅ ✅
OperaGX 浏览器 ✅ ✅ ✅ ✅
Vivaldi 浏览器 ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅
IE 浏览器 ❌ ❌ ❌ ❌

MacOS

由于 MacOS 的安全性设置，基于 Chromium 内核浏览器解密时需要当前用户密码

浏览器 密码 Cookie 书签 历史记录
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge ✅ ✅ ✅ ✅
Brave ✅ ✅ ✅ ✅
Opera ✅ ✅ ✅ ✅
OperaGX ✅ ✅ ✅ ✅
Vivaldi ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅
Safari ❌ ❌ ❌ ❌

Linux

浏览器 密码 Cookie 书签 历史记录
Google Chrome ✅ ✅ ✅ ✅
Google Chrome Beta ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Microsoft Edge ✅ ✅ ✅ ✅
Brave ✅ ✅ ✅ ✅
Opera ✅ ✅ ✅ ✅
Vivaldi ✅ ✅ ✅ ✅
Chromium ✅ ✅ ✅ ✅
Firefox ✅ ✅ ✅ ✅
Firefox Beta ✅ ✅ ✅ ✅
Firefox Dev ✅ ✅ ✅ ✅
Firefox ESR ✅ ✅ ✅ ✅
Firefox Nightly ✅ ✅ ✅ ✅

安装运行

安装

可下载已编译好，可直接运行的 二进制文件

某些情况下，这款安全工具会被 Windows Defender 或其他杀毒软件当作病毒导致无法执行。代码已经全部开源，可自行编译。

从源码编译

支持版本 go 1.14+

git clone https://github.com/moonD4rk/HackBrowserData

cd HackBrowserData

go get -v -t -d ./...

go build

跨平台编译

由于用到了 go-sqlite3 库，在跨平台编译时需提前安装支持目标平台的 GCC 工具，下面以 MacOS 下分别编译 Windows 和 Linux 程序为例：

Windows

brew install mingw-w64

CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build

Linux

brew install FiloSottile/musl-cross/musl-cross

CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static"

运行

双击直接运行，也可以使用命令行调用相应的命令。

PS C:\test> .\hack-browser-data.exe -h
NAME:
   hack-browser-data - Export passwords/cookies/history/bookmarks from browser

USAGE:
   [hack-browser-data -b chrome -f json -dir results -cc]
   Get all data(password/cookie/history/bookmark) from chrome

VERSION:
   0.3.6
GLOBAL OPTIONS:
   --verbose, --vv                     verbose (default: false)
   --compress, --cc                    compress result to zip (default: false)
   --browser value, -b value           available browsers: all|opera|firefox|chrome|edge (default: "all")
   --results-dir value, --dir value    export dir (default: "results")
   --format value, -f value            format, csv|json|console (default: "csv")
   --profile-dir-path value, -p value  custom profile dir path, get with chrome://version
   --key-file-path value, -k value     custom key file path
   --help, -h                          show help (default: false)
   --version, -v                       print the version (default: false)

PS C:\test>  .\hack-browser-data.exe -b all -f json --dir results --cc
[x]:  Get 44 cookies, filename is results/microsoft_edge_cookie.json
[x]:  Get 54 history, filename is results/microsoft_edge_history.json
[x]:  Get 1 passwords, filename is results/microsoft_edge_password.json
[x]:  Get 4 bookmarks, filename is results/microsoft_edge_bookmark.json
[x]:  Get 6 bookmarks, filename is results/360speed_bookmark.json
[x]:  Get 19 cookies, filename is results/360speed_cookie.json
[x]:  Get 18 history, filename is results/360speed_history.json
[x]:  Get 1 passwords, filename is results/360speed_password.json
[x]:  Get 12 history, filename is results/qq_history.json
[x]:  Get 1 passwords, filename is results/qq_password.json
[x]:  Get 12 bookmarks, filename is results/qq_bookmark.json
[x]:  Get 14 cookies, filename is results/qq_cookie.json
[x]:  Get 28 bookmarks, filename is results/firefox_bookmark.json
[x]:  Get 10 cookies, filename is results/firefox_cookie.json
[x]:  Get 33 history, filename is results/firefox_history.json
[x]:  Get 1 passwords, filename is results/firefox_password.json
[x]:  Get 1 passwords, filename is results/chrome_password.json
[x]:  Get 4 bookmarks, filename is results/chrome_bookmark.json
[x]:  Get 6 cookies, filename is results/chrome_cookie.json
[x]:  Get 6 history, filename is results/chrome_history.json
[x]:  Compress success, zip filename is results/archive.zip

基于此工具的一些其他项目

Sharp-HackBrowserData Reflective-HackBrowserData

Contributors

贡献者

404StarLink 2.0 - Galaxy

星链计划

HackBrowserData 是 404Team 星链计划2.0 中的一环，如果对 HackBrowserData 有任何疑问又或是想要找小伙伴交流，可以参考星链计划的加群方式。

TODO

Desktop Browser Market Share Worldwide

Chrome Safari Firefox Edge Legacy IE Other
68.33% 9.4% 8.91% 4.41% 3% 3%

Desktop Browser Market Share China

Chrome 360 Safe Firefox QQ Browser IE Sogou Explorer
39.85% 22.26% 9.28% 6.5% 5.65% 4.74%
  • Chrome
  • QQ browser
  • Edge
  • 360 speed browser
  • Firefox
  • Safari
  • IE