wat4r / ChromeDecryptor

Offline decryption of Chrome/Edge browser passwords and cookies.

ChromeDecryptor

Introduction

ChromeDecryptor is a tool for offline decryption of Chrome/Edge browser passwords and cookies.

Features

• Support offline decryption
• Support multiple ways of decrypting the Master key (password, hash, domain backup key)
• Support all browsers with Chromium core

Usage

chromeDecryptor -h

This will display help for the tool. Here are all the switches it supports.

Usage:
  chromeDecryptor.exe [flags]

Flags:
INPUT:
   -bf, -browser-folder string  browser folder, include Local State, Login Data, Cookies

DPAPI:
   -mkf, -master-key-files string  master key files folder
   -s, -sid string                 user sid
   -p, -password string            password
   -hash string                    sha1 hash or ntlm hash
   -pvk string                     domain backup key (.pvk)

DECRYPT:
   -dp, -decrypt-password  decrypt password(default) (default true)
   -dc, -decrypt-cookies   decrypt cookies

OUTPUT:
   -o, -output string  output path

Example

Directory structure

+---chromeFolder
|       Cookies
|       Local State
|       Login Data
|
+---masterKeyFolder
        +---S-1-5-21-1099483827-325504281-218701502-1001
        |       cd8b97f2-c875-4e9e-85d8-bb8d73954e50
        |       Preferred

Decrypt password

chromeDecryptor -bf ./chromeFolder -mkf ./masterKeyFolder -p password123 -o pwd.txt

Decrypt cookies

chromeDecryptor -bf ./chromeFolder -mkf ./masterKeyFolder -p password123 -dc -o cookies.txt

License

This project is licensed under the Apache 2.0 license.

Contact

If you have any issues or feature requests, please contact us. PR is welcomed.

• https://github.com/wat4r/ChromeDecryptor/issues