{"id":22111688,"url":"https://github.com/phx/browserintel","last_synced_at":"2026-05-05T17:32:18.401Z","repository":{"id":121578224,"uuid":"441260599","full_name":"phx/browserintel","owner":"phx","description":"Suite of python3 tools including platform-dependent golang binaries to gather browser info from red team exercises","archived":false,"fork":false,"pushed_at":"2021-12-28T21:07:52.000Z","size":14633,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-10-28T00:39:15.479Z","etag":null,"topics":["browser","cookies","cybersecurity","golang","hacking","python3","redteam","sqlite","sqlite3"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/phx.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-12-23T18:08:27.000Z","updated_at":"2021-12-28T21:07:54.000Z","dependencies_parsed_at":null,"dependency_job_id":"abec4c52-5f54-4749-bac2-c6d4fb6ad14b","html_url":"https://github.com/phx/browserintel","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/phx/browserintel","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phx%2Fbrowserintel","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phx%2Fbrowserintel/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phx%2Fbrowserintel/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phx%2Fbrowserintel/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/phx","download_url":"https://codeload.github.com/phx/browserintel/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/phx%2Fbrowserintel/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32660253,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-05T11:29:49.557Z","status":"ssl_error","status_checked_at":"2026-05-05T11:29:48.587Z","response_time":54,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["browser","cookies","cybersecurity","golang","hacking","python3","redteam","sqlite","sqlite3"],"created_at":"2024-12-01T10:50:33.989Z","updated_at":"2026-05-05T17:32:18.380Z","avatar_url":"https://github.com/phx.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"![Platform: ALL](https://img.shields.io/badge/platform-ALL-green)\n![Dependencies: Python3](https://img.shields.io/badge/dependencies-Python3-blue)\n![Version: Latest](https://img.shields.io/badge/version-latest-green)\n![Follow @rubynorails on Twitter](https://img.shields.io/twitter/follow/rubynorails?label=follow\u0026style=social)\n\n# browserintel\n\nThis entire suite of utilities is designed to be run from the `browserintel.py` script, thus it requires a working Python3 environment with native libraries.\n\nPlease note that for Chrome encrypted data to be decrypted, you will need to use the `-A` flag and must be running this locally on the host where the data resides (and know the login password in the case of MacOS).\n\nThis is not the case for Firefox data, which is unencrypted most of the time, but can be decrypted on a different machine if you know the password it was encrypted with (`-p [MASTER PASSWORD]`).\n\n## Usage\n\n```\nusage: browserintel.py [-h] [-u USERNAME] [-p MASTER_PASSWORD] [-b BROWSER_DIR] [-pp PROFILE_DIR] [-cp COOKIES_PATH] [-hp HISTORY_PATH] [-lp LOGINS_PATH] [-A] [-C] [-H] [-L]\n\nGather data from various browser sqlite databases\n\noptional arguments:\n  -h, --help            show this help message and exit\n\nString options:\n  -u USERNAME, --user USERNAME\n                        set the username for output directory\n  -p MASTER_PASSWORD, --masterpass MASTER_PASSWORD\n                        master password to use if Mozilla browser data is encrypted\n  -b BROWSER_DIR, --browserdir BROWSER_DIR\n                        path to main browser directory to search\n  -pp PROFILE_DIR, --profile-path PROFILE_DIR\n                        path to specific profile directory to search\n  -cp COOKIES_PATH, --cookies-path COOKIES_PATH\n                        path to cookies database\n  -hp HISTORY_PATH, --history-path HISTORY_PATH\n                        path to history database\n  -lp LOGINS_PATH, --logins-path LOGINS_PATH\n                        path to logins database\n\nBoolean options:\n  -A, --all             Attempt to gather all data from all installed browsers (except for IE)\n  -C, --cookies         attempt to gather cookies information\n  -H, --history         attempt to gather history information\n  -L, --logins          attempt to gather login information\n```\n\n## Important note about AV Detection:\n\nIf deployed on a Windows host, the Go binaries may trigger AV in certain cases, so you have been warned.\n\n## Runnng on MacOS:\n\nIn order to run on MacOS, you will have to right-click on `tools/hackbrowserdata/hbd-macos`, and Click \"Open\".\n\nThis will actually run it and store results from your local machine probably in your home directory under `results`.\n\nYou can then just `rm -rf ~/results`, and run the bash script normally without the binary providing any additional difficulty.\n\n### To-Do:\n\n- [Potentially] add support for additional browsers\n- Add local support for more architectures\n\n### Troubleshooting:\n\nFor troubleshooting, please submit an issue.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphx%2Fbrowserintel","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fphx%2Fbrowserintel","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fphx%2Fbrowserintel/lists"}