HackBrowserData is a command-line tool for extracting and decrypting browser data across multiple browsers and operating systems.
The tool addresses the need to recover sensitive information stored in browsers by automating the extraction and decryption of passwords, cookies, bookmarks, history, download records, credit cards, extensions, and storage data. It works by accessing the browser's local storage files and using the appropriate decryption keys for each browser type. A distinctive capability is cross-host decryption: users can export master keys from one machine and decrypt browser data on a different machine or operating system, even for browsers that the analyst's OS cannot natively run.
The tool suits security researchers and penetration testers who need to audit browser security or recover data during forensic analysis. It supports Chromium-based browsers, Firefox, and Safari across Windows, macOS, and Linux. On macOS, some Chromium browsers require the current user password for decryption, and password decryption may fail on macOS 26.4 or later. Windows users decrypting Chromium 127 and later cookies for Chrome, Chrome Beta, Edge, Brave, or CocCoc need to build the tool from source with App-Bound Encryption support. The README notes that antivirus software may flag the binary as malicious, though the code is open source and can be modified and compiled locally.
Development activity shows consistent maintenance with regular updates to support new browser versions and encryption methods. The project maintains comprehensive documentation of supported browsers and data types across platforms. The codebase is written in Go and requires Go 1.20 or later for building from source. The tool is distributed as pre-compiled binaries for each platform, with straightforward installation.
