【神兵利器】红队浏览器凭据提取工具

项目介绍

HackBrowserData是一个命令行工具，它主要用于从浏览器中解密和导出浏览器数据(密码、历史记录、cookies、书签、信用卡、下载历史记录、本地存储和扩展)。它支持目前市场上最流行的浏览器，可以在Windows、macOS和Linux上运行

支持情况

HackBrowserData目前支持一下浏览器：

(1) Windows平台

Browser	Password	Cookie	Bookmark	History
Google Chrome	✅	✅	✅	✅
Google Chrome Beta	✅	✅	✅	✅
Chromium	✅	✅	✅	✅
Microsoft Edge	✅	✅	✅	✅
360 Speed	✅	✅	✅	✅
QQ	✅	✅	✅	✅
Brave	✅	✅	✅	✅
Opera	✅	✅	✅	✅
OperaGX	✅	✅	✅	✅
Vivaldi	✅	✅	✅	✅
Yandex	✅	✅	✅	✅
CocCoc	✅	✅	✅	✅
Firefox	✅	✅	✅	✅
Firefox Beta	✅	✅	✅	✅
Firefox Dev	✅	✅	✅	✅
Firefox ESR	✅	✅	✅	✅
Firefox Nightly‍	✅	✅	✅	✅
Internet Explorer	❌	❌	❌	❌

(2) MacOS平台

根据Apple的安全政策，一些浏览器需要当前用户密码才能解密。

Browser	Password	Cookie	Bookmark	History
Google Chrome	✅	✅	✅	✅
Google Chrome Beta	✅	✅	✅	✅
Chromium	✅	✅	✅	✅
Microsoft Edge	✅	✅	✅	✅
Brave	✅	✅	✅	✅
Opera	✅	✅	✅	✅
OperaGX	✅	✅	✅	✅
Vivaldi	✅	✅	✅	✅
CocCoc	✅	✅	✅	✅
Yandex	✅	✅	✅	✅
Arc	✅	✅	✅	✅
Firefox	✅	✅	✅	✅
Firefox Beta	✅	✅	✅	✅
Firefox Dev	✅	✅	✅	✅
Firefox ESR	✅	✅	✅	✅
Firefox Nightly	✅	✅	✅	✅
Safari	❌	❌	❌	❌

项目使用

在命令行中执行以下代码进行运行：

PS C:Usersmoond4rkDesktop> .hack-browser-data.exe -hNAME:   hack-browser-data - Export passwords|bookmarks|cookies|history|credit cards|download history|localStorage|extensions from browserUSAGE:   [hack-browser-data -b chrome -f json --dir results --zip]   Export all browsing data (passwords/cookies/history/bookmarks) from browser   Github Link: https://github.com/moonD4rk/HackBrowserDataVERSION:   0.4.6GLOBAL OPTIONS:   --verbose, --vv                   verbose (default: false)   --compress, --zip                 compress result to zip (default: false)   --browser value, -b value         available browsers: all|360|brave|chrome|chrome-beta|chromium|coccoc|dc|edge|firefox|opera|opera-gx|qq|sogou|vivaldi|yandex (default: "all")   --results-dir value, --dir value  export dir (default: "results")   --format value, -f value          output format: csv|json (default: "csv")   --profile-path value, -p value    custom profile dir path, get with chrome://version   --full-export, --full             is export full browsing data (default: true)   --help, -h                        show help   --version, -v                     print the version

例如：下面是对当前计算机上的浏览器的自动扫描，以JSON格式输出解密结果并压缩为zip

PS C:Usersmoond4rkDesktop> .hack-browser-data.exe -b all -f json --dir results --zipPS C:Usersmoond4rkDesktop> ls -l .results    Directory: C:Usersmoond4rkDesktopresultsMode                 LastWriteTime         Length Name----                 -------------         ------ -----a----         7/15/2024  10:55 PM          44982 results.zip

使用自定义浏览器配置文件文件夹运行

如果要从自定义浏览器配置文件文件夹中导出数据，可以使用-p参数来指定浏览器配置文件文件夹的路径。PS:用双引号把路径括起来

PS C:Usersmoond4rkDesktop> .hack-browser-data.exe -b chrome -p "C:UsersUserAppDataLocalMicrosoftEdgeUser DataDefault"[NOTICE] [browsingdata.go:59,Output] output to file results/chrome_creditcard.csv success  [NOTICE] [browsingdata.go:59,Output] output to file results/chrome_bookmark.csv success  [NOTICE] [browsingdata.go:59,Output] output to file results/chrome_cookie.csv success  [NOTICE] [browsingdata.go:59,Output] output to file results/chrome_history.csv success  [NOTICE] [browsingdata.go:59,Output] output to file results/chrome_download.csv success  [NOTICE] [browsingdata.go:59,Output] output to file results/chrome_password.csv success