{"id":15010746,"url":"https://github.com/cycloctane/browserpass","last_synced_at":"2026-02-07T14:34:48.680Z","repository":{"id":243690054,"uuid":"813023076","full_name":"Cycloctane/BrowserPass","owner":"Cycloctane","description":"Decrypt browser passwords and cookies offline with DPAPI masterkey","archived":false,"fork":false,"pushed_at":"2025-02-17T11:37:06.000Z","size":13,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-17T12:31:42.130Z","etag":null,"topics":["chrome","chromium","password","python","windows"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Cycloctane.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-06-10T11:02:52.000Z","updated_at":"2025-02-17T11:37:10.000Z","dependencies_parsed_at":"2024-11-21T01:15:49.785Z","dependency_job_id":null,"html_url":"https://github.com/Cycloctane/BrowserPass","commit_stats":null,"previous_names":["cycloctane/browserpass"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cycloctane%2FBrowserPass","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cycloctane%2FBrowserPass/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cycloctane%2FBrowserPass/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cycloctane%2FBrowserPass/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Cycloctane","download_url":"https://codeload.github.com/Cycloctane/BrowserPass/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243291234,"owners_count":20267867,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["chrome","chromium","password","python","windows"],"created_at":"2024-09-24T19:35:38.230Z","updated_at":"2026-02-07T14:34:48.634Z","avatar_url":"https://github.com/Cycloctane.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# BrowserPass\n\nDecrypt browser passwords and cookies offline with DPAPI masterkey file.\n\nCurrently supports Chromium and Windows credentials(IE passwords). Tested on Google Chrome, Opera and MS Edge.\n\nWorks with masterkey and Chromium user data from standalone win7 and win10 with local account. Note that Microsoft Accounts use random generated password for DPAPI. It is not possible to decrypt secrets from Microsoft Accounts only using logon password.\n\n## Usage\n\nUse `python -m BrowserPass` or run `python ./run.py`\n\n### Chromium\n\nRequired files:\n\n- user sid and password: `S-1-xxxxxxxx`\n- user Master Key files (directory): `%AppData%\\Microsoft\\Protect\\S-1-xxxxxxxx`. It may contains multiple key files. So the whole directory is needed.\n- Chromium user data:\n  - Local State: `%path_to_browser_appdata%\\User Data\\Local State`.\n  - Cookies sqlite database (for cookies decryption): `%path_to_browser_appdata%\\User Data\\Default\\Cookies`.\n  - Login Data sqlite database (for passwords decryption): `%path_to_browser_appdata%\\User Data\\Default\\Login Data`.\n\n```bash\npython -m BrowserPass chromium --sid $windows_sid -p $password\\\n  --masterkey_dir $path_to_masterkey_dir\\\n  --localstate_path $path_to_localstate_file\\\n  --cookie_path $path_to_cookie_file\\\n  --logindata_path $path_to_logindata_file\n```\n\nIf password is not specific by `-p`, it will be asked interactively.\n\nset `--csv=$dirpath` to write results to csv files and save to specified directory.\n\n```bash\npython -m BrowserPass chromium --sid $windows_sid -p $password\\\n  --masterkey_dir $path_to_masterkey_dir\\\n  --localstate_path $path_to_localstate_file\\\n  --cookie_path $path_to_cookie_file\\\n  --logindata_path $path_to_logindata_file\n  --csv $dirpath\n```\n\n## Examples\n\nDecrypt all cookies and passwords from Chromium User Data:\n\n```bash\npython -m BrowserPass chromium\\\n  --sid S-1-xxxxxxxx\\\n  --masterkey_dir ./S-1-xxxxxxxx/\\\n  --localstate_path ./Local\\ State\\\n  --cookie_path ./Cookies\\\n  --logindata_path ./Login\\ Data\n```\n\nSave the csv files to current working directory.\n\n```bash\npython -m BrowserPass chromium\\\n  --sid S-1-xxxxxxxx\\\n  --masterkey_dir ./S-1-xxxxxxxx/\\\n  --localstate_path ./Local\\ State\\\n  --cookie_path ./Cookies\\\n  --logindata_path ./Login\\ Data\n  --csv .\n```\n\ntesting: decrypt raw DPAPI blob file. Output to stdout.\n\n```bash\npython -m BrowserPass dpapi --sid S-1-xxxxxxxx --masterkey_path ./S-1-xxxxxxxx\\\n  --blob blob.dat --offset 5\n```\n\nset `--offset=12` to decrypt Windows Credentials files from `%AppData%\\Microsoft\\Credentials`\n\n```bash\npython -m BrowserPass dpapi --sid S-1-xxxxxxxx --masterkey_path ./S-1-xxxxxxxx\\\n  --blob ./C1xxxxxxxx --offset 12\n```\n\n## LICENSE\n\nThis project is licensed under the GNU General Public License v3.0. \n\n```\nBrowserPass - Browser Password Decryptor\nCopyright (C) 2024 Cycloctane\n\nThis program is free software: you can redistribute it and/or modify\nit under the terms of the GNU General Public License as published by\nthe Free Software Foundation, either version 3 of the License, or\n(at your option) any later version.\n\nThis program is distributed in the hope that it will be useful,\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\nGNU General Public License for more details.\n\nYou should have received a copy of the GNU General Public License\nalong with this program.  If not, see \u003chttps://www.gnu.org/licenses/\u003e.\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcycloctane%2Fbrowserpass","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcycloctane%2Fbrowserpass","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcycloctane%2Fbrowserpass/lists"}