From 74ed03caa23346ca3a2f4f42a4c7b18e27bc6dee Mon Sep 17 00:00:00 2001 From: moond4rk Date: Thu, 11 Feb 2021 00:36:50 +0800 Subject: [PATCH] docs: update version flag to 0.3.5 --- README.md | 76 +++++++++++++++++++++++++++++++--------------------- README_ZH.md | 67 ++++++++++++++++++++++++++------------------- cmd/cmd.go | 2 +- 3 files changed, 86 insertions(+), 59 deletions(-) diff --git a/README.md b/README.md index ecc812b..0135ad9 100644 --- a/README.md +++ b/README.md @@ -4,30 +4,34 @@ [中文说明](https://github.com/moonD4rk/HackBrowserData/blob/master/README_ZH.md) -hack-browser-data is an open-source tool that could help you decrypt data ( passwords|bookmarks|cookies|history ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux. +hack-browser-data is an open-source tool that could help you decrypt data ( password|bookmark|cookie|history|credit card|downloads link ) from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux. > Statement: This tool is limited to security research only, and the user assumes all legal and related responsibilities arising from its use! The author assumes no legal responsibility! -### Supported Browser +## Supported Browser -#### Windows +### Windows | Browser | Password | Cookie | Bookmark | History | | :---------------------------------- | :------: | :----: | :------: | :-----: | | Google Chrome | ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox | ✅ | ✅ | ✅ | ✅ | | Microsoft Edge | ✅ | ✅ | ✅ | ✅ | -| 360 Speed Browser | ✅ | ✅ | ✅ | ✅ | -| QQ Browser | ✅ | ✅ | ✅ | ✅ | -| Brave Browser | ✅ | ✅ | ✅ | ✅ | -| Opera Browser | ✅ | ✅ | ✅ | ✅ | -| OperaGX Browser | ✅ | ✅ | ✅ | ✅ | -| Vivaldi Browser | ✅ | ✅ | ✅ | ✅ | +| 360 Speed | ✅ | ✅ | ✅ | ✅ | +| QQ | ✅ | ✅ | ✅ | ✅ | +| Brave | ✅ | ✅ | ✅ | ✅ | +| Opera | ✅ | ✅ | ✅ | ✅ | +| OperaGX | ✅ | ✅ | ✅ | ✅ | +| Vivaldi | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | | Internet Explorer | ❌ | ❌ | ❌ | ❌ | -#### MacOS +### MacOS Based on Apple's security policy, some browsers **require a current user password** to decrypt. @@ -36,27 +40,37 @@ Based on Apple's security policy, some browsers **require a current user passwor | Google Chrome | ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox | ✅ | ✅ | ✅ | ✅ | | Microsoft Edge | ✅ | ✅ | ✅ | ✅ | -| Brave Browser | ✅ | ✅ | ✅ | ✅ | -| Opera Browser | ✅ | ✅ | ✅ | ✅ | -| OperaGX Browser | ✅ | ✅ | ✅ | ✅ | -| Vivaldi Browser | ✅ | ✅ | ✅ | ✅ | +| Brave | ✅ | ✅ | ✅ | ✅ | +| Opera | ✅ | ✅ | ✅ | ✅ | +| OperaGX | ✅ | ✅ | ✅ | ✅ | +| Vivaldi | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | | Safari | ❌ | ❌ | ❌ | ❌ | -#### Linux +### Linux | Browser | Password | Cookie | Bookmark | History | | :---------------------------------- | :------: | :----: | :------: | :-----: | | Google Chrome | ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox | ✅ | ✅ | ✅ | ✅ | | Microsoft Edge Dev | ✅ | ✅ | ✅ | ✅ | -| Brave Browser | ✅ | ✅ | ✅ | ✅ | -| Opera Browser | ✅ | ✅ | ✅ | ✅ | -| Vivaldi Browser | ✅ | ✅ | ✅ | ✅ | +| Brave | ✅ | ✅ | ✅ | ✅ | +| Opera | ✅ | ✅ | ✅ | ✅ | +| Vivaldi | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | + +## Getting started ### Install @@ -64,7 +78,7 @@ Installation of hack-browser-data is dead-simple, just download [the release for > In some situations, this security tool will be treated as a virus by Windows Defender or other antivirus software and can not be executed, after version 0.2.6 will use UPX try to simply bypass, then no longer with antivirus software to do unnecessary security confrontations.The code is all open source, you can modify and compile by yourself. -#### Building from source +### Building from source support `go 1.14+` @@ -78,11 +92,11 @@ go get -v -t -d ./... go build ``` -##### Cross compile +### Cross compile Need install target OS's `gcc` library, here's an example of use `Mac` building for `Windows` and `Linux` -**Windows** +#### For Windows ```shell brew install mingw-w64 @@ -90,7 +104,7 @@ brew install mingw-w64 CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build ``` -**Linux** +#### For Linux ````shell brew install FiloSottile/musl-cross/musl-cross @@ -98,7 +112,7 @@ brew install FiloSottile/musl-cross/musl-cross CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static" ```` -#### Run +### Run You can double-click to run, or use command line. @@ -112,7 +126,7 @@ USAGE: Get all data(password/cookie/history/bookmark) from chrome VERSION: - 0.3.4 + 0.3.5 GLOBAL OPTIONS: --verbose, --vv verbose (default: false) --compress, --cc compress result to zip (default: false) @@ -147,7 +161,7 @@ PS C:\test> .\hack-browser-data.exe -b all -f json --dir results -cc [x]: Get 6 history, filename is results/chrome_history.json [x]: Compress success, zip filename is results/archive.zip ``` -#### Run with custom browser profile path +### Run with custom browser profile path ``` PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default' -k 'C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Local State' @@ -168,18 +182,18 @@ PS C:\Users\User\Desktop> .\hack-browser-data.exe -b edge -p 'C:\Users\User\AppD [x]: Get 0 passwords, filename is results/microsoft_edge_password.csv ``` -### Contributors +## Contributors ![](/CONTRIBUTORS.svg) -### 404StarLink 2.0 - Galaxy +## 404StarLink 2.0 - Galaxy ![](https://github.com/knownsec/404StarLink-Project/raw/master/logo.png) HackBrowserData is a part of 404Team [StarLink-Galaxy](https://github.com/knownsec/404StarLink2.0-Galaxy), if you have any questions about HackBrowserData or want to find a partner to communicate with,please refer to the [Starlink group](https://github.com/knownsec/404StarLink2.0-Galaxy#community). -### TODO +## TODO [Desktop Browser Market Share Worldwide](https://gs.statcounter.com/browser-market-share/desktop/worldwide) diff --git a/README_ZH.md b/README_ZH.md index 6cc2cb2..746a597 100644 --- a/README_ZH.md +++ b/README_ZH.md @@ -1,20 +1,19 @@ # HackBrowserData -hack-browser-data 是一个解密浏览器数据(密码|历史记录|Cookies|书签)的导出工具,支持全平台主流浏览器。 +hack-browser-data 是一个解密浏览器数据(密码|历史记录|Cookie|书签 | 信用卡 | 下载记录)的导出工具,支持全平台主流浏览器。 >特别声明:此工具仅限于安全研究,用户承担因使用此工具而导致的所有法律和相关责任!作者不承担任何法律责任! -### 各平台浏览器支持情况 +## 各平台浏览器支持情况 -#### Windows +### Windows -| 浏览器 | 密码 | Cookie | 书签 | 历史记录 | -| :--------------------------- | :------: | :----: | :------: | :-----: | +| 浏览器 | 密码 | Cookie | 书签 | 历史记录 | +| :------- | :------: | :----: | :------: | :-----: | | Google Chrome| ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta| ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox| ✅ | ✅ | ✅ | ✅ | | Microsoft Edge| ✅ | ✅ | ✅ | ✅ | | 360 极速浏览器 | ✅ | ✅ | ✅ | ✅ | | QQ 浏览器| ✅ | ✅ | ✅ | ✅ | @@ -22,8 +21,13 @@ hack-browser-data 是一个解密浏览器数据(密码|历史记录|Cookies| | Opera 浏览器 | ✅ | ✅ | ✅ | ✅ | | OperaGX 浏览器 | ✅ | ✅ | ✅ | ✅ | | Vivaldi 浏览器 | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | | IE 浏览器 | ❌ | ❌ | ❌ | ❌ | -#### MacOS +### MacOS 由于 MacOS 的安全性设置,基于 `Chromium` 内核浏览器解密时**需要当前用户密码** @@ -32,35 +36,44 @@ hack-browser-data 是一个解密浏览器数据(密码|历史记录|Cookies| | Google Chrome | ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox| ✅ | ✅ | ✅ | ✅ | | Microsoft Edge | ✅ | ✅ | ✅ | ✅ | -| Brave 浏览器 | ✅ | ✅ | ✅ | ✅ | -| Opera 浏览器 | ✅ | ✅ | ✅ | ✅ | -| OperaGX 浏览器 | ✅ | ✅ | ✅ | ✅ | -| Vivaldi 浏览器 | ✅ | ✅ | ✅ | ✅ | +| Brave | ✅ | ✅ | ✅ | ✅ | +| Opera | ✅ | ✅ | ✅ | ✅ | +| OperaGX | ✅ | ✅ | ✅ | ✅ | +| Vivaldi | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | | Safari | ❌ | ❌ | ❌ | ❌| -#### Linux +### Linux | 浏览器 | 密码 | Cookie | 书签 | 历史记录 | | :------------ | :------: | :----: | :------: | :-----: | | Google Chrome | ✅ | ✅ | ✅ | ✅ | | Google Chrome Beta | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | -| Firefox | ✅ | ✅ | ✅ | ✅ | | Microsoft Edge | ✅ | ✅ | ✅ | ✅ | -| Brave 浏览器 | ✅ | ✅ | ✅ | ✅ | -| Opera Browser | ✅ | ✅ | ✅ | ✅ | -| Vivaldi Browser | ✅ | ✅ | ✅ | ✅ | +| Brave | ✅ | ✅ | ✅ | ✅ | +| Opera | ✅ | ✅ | ✅ | ✅ | +| Vivaldi | ✅ | ✅ | ✅ | ✅ | | Chromium | ✅ | ✅ | ✅ | ✅ | +| Firefox | ✅ | ✅ | ✅ | ✅ | +| Firefox Beta | ✅ | ✅ | ✅ | ✅ | +| Firefox Dev | ✅ | ✅ | ✅ | ✅ | +| Firefox ESR | ✅ | ✅ | ✅ | ✅ | +| Firefox Nightly | ✅ | ✅ | ✅ | ✅ | -### 安装运行 +## 安装运行 +### 安装 可下载已编译好,直接运行的 [二进制文件 ](https://github.com/moonD4rk/HackBrowserData/releases) > 某些情况下,这款安全工具会被 Windows Defender 或其他杀毒软件当作病毒从而无法执行,0.2.6 版本后将使用 UPX 做简单的压缩壳免杀,后续不再提供免杀做无谓的安全对抗。代码已全部开源,可自己修改编译。 -#### 自己编译 +### 从源码编译 支持版本 `go 1.14+` @@ -74,11 +87,11 @@ go get -v -t -d ./... go build ``` -##### 跨平台编译 +### 跨平台编译 由于用到了 `go-sqlite3` 库,在跨平台编译时需提前安装支持目标平台的 `GCC` 工具,下面以 `MacOS` 下分别编译 `Windows` 和 `Linux` 程序为例: -**Windows** +#### Windows ```shell @@ -87,7 +100,7 @@ brew install mingw-w64 CGO_ENABLED=1 GOOS=windows GOARCH=amd64 CC="x86_64-w64-mingw32-gcc" go build ``` -**Linux** +#### Linux ```shell brew install FiloSottile/musl-cross/musl-cross @@ -95,7 +108,7 @@ brew install FiloSottile/musl-cross/musl-cross CC=x86_64-linux-musl-gcc CXX=x86_64-linux-musl-g++ GOARCH=amd64 GOOS=linux CGO_ENABLED=1 go build -ldflags "-linkmode external -extldflags -static" ``` -#### 运行 +### 运行 双击直接运行,也可以命令行调整对应的命令 @@ -109,7 +122,7 @@ USAGE: Get all data(password/cookie/history/bookmark) from chrome VERSION: - 0.3.4 + 0.3.5 GLOBAL OPTIONS: --verbose, --vv verbose (default: false) --compress, --cc compress result to zip (default: false) @@ -145,16 +158,16 @@ PS C:\test> .\hack-browser-data.exe -b all -f json --dir results -cc [x]: Compress success, zip filename is results/archive.zip ``` -### Contributors +## Contributors ![](/CONTRIBUTORS.svg) -### 404StarLink 2.0 - Galaxy +## 404StarLink 2.0 - Galaxy ![](https://github.com/knownsec/404StarLink-Project/raw/master/logo.png) HackBrowserData 是 404Team [星链计划2.0](https://github.com/knownsec/404StarLink2.0-Galaxy) 中的一环,如果对 HackBrowserData有任何疑问又或是想要找小伙伴交流,可以参考[星链计划的加群方式](https://github.com/knownsec/404StarLink2.0-Galaxy#community)。 -### TODO +## TODO [Desktop Browser Market Share Worldwide](https://gs.statcounter.com/browser-market-share/desktop/worldwide) diff --git a/cmd/cmd.go b/cmd/cmd.go index b32f1b9..903a378 100644 --- a/cmd/cmd.go +++ b/cmd/cmd.go @@ -25,7 +25,7 @@ func Execute() { Name: "hack-browser-data", Usage: "Export passwords/cookies/history/bookmarks from browser", UsageText: "[hack-browser-data -b chrome -f json -dir results -cc]\n Get all data(password/cookie/history/bookmark) from chrome", - Version: "0.3.4", + Version: "0.3.5", Flags: []cli.Flag{ &cli.BoolFlag{Name: "verbose", Aliases: []string{"vv"}, Destination: &verbose, Value: false, Usage: "verbose"}, &cli.BoolFlag{Name: "compress", Aliases: []string{"cc"}, Destination: &compress, Value: false, Usage: "compress result to zip"},