HackBrowserData

Open source · DFIR · cross-platform

Decrypt supported browser data,
across platforms.

Export passwords, cookies, history and six more data categories from 20 browsers — Chromium-based and Firefox on Windows, macOS and Linux, plus Safari on macOS. Built for authorized security testing, incident response and DFIR.

Get started Download v1.2.0 GitHub ★ 14.7k

v1.2.0 · MIT licensed · one self-contained binary per target

$ hack-browser-data dump --browser chrome --category password,cookie
[INF] Extracting Chrome...
 
[INF] Exported to results/
[INF]   password.json            113 entries
[INF]   cookie.json              3457 entries
Browser  Profile    Category  Result   Records  Detail
chrome   Default    password  ok       101
chrome   Default    cookie    ok       2817
chrome   Profile 1  password  ok       12
chrome   Profile 1  cookie    partial  640      2 not recovered
$ hack-browser-data list
Browser          Profile                    Path
Chrome           Default                    /home/you/.config/google-chrome/Default
Chrome           Profile 1                  /home/you/.config/google-chrome/Profile 1
Microsoft Edge   Default                    /home/you/.config/microsoft-edge/Default
Chromium         Default                    /home/you/.config/chromium/Default
Vivaldi          Default                    /home/you/.config/vivaldi/Default
Brave            Default                    /home/you/.config/BraveSoftware/Brave-Browser/Default
Firefox          k7d2x9qa.default-release   /home/you/.mozilla/firefox/k7d2x9qa.default-release
Firefox          x4p8r2tz.work              /home/you/.mozilla/firefox/x4p8r2tz.work
$ hack-browser-data list --detail
Browser          Profile                    password   cookie   bookmark   history   download   creditcard   extension   localstorage   sessionstorage
Chrome           Default                    101        2817     342        9530      96         2            14          1203           48
Chrome           Profile 1                  12         640      25         1874      11         0            3           210            6
Microsoft Edge   Default                    8          380      40         2210      17         0            5           388            9
Chromium         Default                    0          96       4          233       5          0            2           41             1
Vivaldi          Default                    5          412      61         1588      9          0            4           175            3
Brave            Default                    27         1295     88         4302      33         1            9           640            12
Firefox          k7d2x9qa.default-release   62         2393     118        5120      30         0            7           402            0
Firefox          x4p8r2tz.work              9          507      21         986       6          0            3           77             0
$ hack-browser-data version
hack-browser-data 1.2.0
  commit: ac8f76f
  built:  2026-11-02T07:55:41Z

Sample sessions in the real v1.2.0 output format. Every dump and restore ends with a per-category result: ok · partial · absent · unsupported · error

Presented at

Install

One binary. No runtime.

Pick your platform, run one command, then point it at a browser. Release binaries are built for Windows, macOS and Linux on amd64 and arm64.

All install options →

$ brew install moond4rk/tap/hack-browser-data

Homebrew tap, updated on every release.

$ curl -L https://github.com/moonD4rk/HackBrowserData/releases/latest/download/hack-browser-data-linux-64bit.tar.gz | tar -xz

amd64 shown; arm64, arm and 386 builds are on the release page.

$ curl.exe -LO https://github.com/moonD4rk/HackBrowserData/releases/latest/download/hack-browser-data-windows-64bit.zip
$ tar -xf hack-browser-data-windows-64bit.zip

PowerShell or cmd on Windows 10 and later.

$ go install github.com/moond4rk/hackbrowserdata/cmd/hack-browser-data@latest

Builds from source with your Go toolchain.

Then run hack-browser-data dump — results land in results/. Getting started →

What it exports

Nine data categories

One file per category, as JSON, CSV or a cookie-editor import. Chromium-based browsers cover all nine; Firefox and Safari cover seven.

  • Passwords

    password.json

    Saved logins for each site.

    Chromium Firefox Safari

  • Cookies

    cookie.json

    Host, path, expiry and flags per cookie.

    Chromium Firefox Safari

  • History

    history.json

    Visited URLs, titles and visit counts.

    Chromium Firefox Safari

  • Bookmarks

    bookmark.json

    Saved bookmarks with their folders.

    Chromium Firefox Safari

  • Downloads

    download.json

    Download history: target path and size.

    Chromium Firefox Safari

  • Extensions

    extension.json

    Installed extensions and their IDs.

    Chromium Firefox Safari

  • Local storage

    localstorage.json

    Per-site localStorage key/value pairs.

    Chromium Firefox Safari

  • Credit cards

    creditcard.json

    Saved payment cards.

    Chromium Firefox Safari

  • Session storage

    sessionstorage.json

    Per-site sessionStorage entries.

    Chromium Firefox Safari

Coverage

20 browsers on 3 operating systems

Chromium-based browsers on Windows, macOS and Linux (coverage varies by browser), Firefox everywhere, Safari on macOS.

Full support matrix →

19 Windows

Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox, Arc, Yandex, CocCoc, Chromium, Chrome Beta, DuckDuckGo, 360 Speed, 360 Speed X, QQ, Sogou, DC, Browser from Vought

13 macOS

Safari, Chrome, Edge, Brave, Arc, Opera, Opera GX, Vivaldi, Firefox, Yandex, CocCoc, Chromium, Chrome Beta

8 Linux

Chrome, Edge, Brave, Opera, Vivaldi, Firefox, Chromium, Chrome Beta

Responsible use

Run HackBrowserData only on systems you own or are explicitly authorized to examine — security assessments, incident response, digital forensics, or recovering your own data. Exports contain live secrets: store them like evidence and delete them when the engagement ends.

About the project →