hack-browser-data を Homebrew でインストール

プロジェクトリンク

• ホームページ
• 上流ドキュメント
• パッケージマネージャページ

コマンドとエイリアス

• hack-browser-data

プロジェクトの歴史

The public GitHub repository was created in June 2020. The README describes support for Chromium-based browsers and Firefox on Windows, macOS, and Linux, plus Safari on macOS, and includes a legal-use disclaimer aimed at security research.

The project evolved from local extraction into richer workflows. Release notes and README content show additions such as local storage export, pure-Go SQLite-related refactoring, optimized encryption/decryption modules, Safari support, Chromium App-Bound Encryption support, and cross-host decryption workflows.

採用の歴史

Adoption is visible in the repository scale, release activity, and packaging through Homebrew. The tool appeals to incident-response, red-team, browser-forensics, and security-lab users because browser secrets and artifacts are spread across OS-specific stores, SQLite databases, browser profile layouts, keychains, and DPAPI-like mechanisms.

Cross-host decryption broadened its operational model: an origin host can export Chromium master keys and archive relevant profile files, while an analyst host restores and decrypts offline, even across operating systems for some browser families.

使われ方

The default `dump` command extracts local browser data with flags for browser, category, output directory, format, profile path, macOS keychain password, verbosity, and zip output. Other commands list profiles, export master keys, archive decryption-relevant files, restore copied profile data with exported keys, and print version information.

Supported data categories include passwords, cookies, bookmarks, history, downloads, credit cards for Chromium-based browsers, extensions, localStorage, and sessionStorage where supported. The README notes platform-specific requirements such as Full Disk Access for Safari and extra payload support for some Chromium cookie decryption on Windows.

パッケージ好きにとっての重要性

HackBrowserData is notable as a packaged security tool because it compresses many browser- and OS-specific storage rules into one CLI. For package users, the value is less about a library API and more about repeatable collection, export formats, cross-platform builds, and workflows that can be scripted during authorized investigations.

タイムライン

• 2020: Public repository created.
• 2022: v0.4.x releases included browser-data extraction fixes and local-storage support.
• 2024: v0.4.6 release notes described refactors, pure-Go driver work, and encryption/decryption optimization.
• 2026: v1.x release notes documented architecture rewrite, Safari, Chromium App-Bound Encryption, and cross-host decryption and restore workflows.

Related projects

• Related surfaces include Chromium, Chrome, Edge, Brave, Firefox, Safari, browser profile SQLite databases, Windows DPAPI and App-Bound Encryption, macOS Keychain, and incident-response tooling that inventories browser artifacts.

ソース

• https://formulae.brew.sh/formula/hack-browser-data
• https://github.com/moonD4rk/HackBrowserData
• https://github.com/moonD4rk/HackBrowserData/releases
• https://raw.githubusercontent.com/moonD4rk/HackBrowserData/main/README.md