Chrdmp – Decrypt Chrome profile data offline using the keyring secret

chrdmp is an offline profile decryption tool for the Google Chrome browser. It enables decryption of the Login Data file that contains user passwords and the Cookies file which contains the browser's cookies. This tool is specifically intended for use with systems that use a keyring to encrypt browser secrets (i.e., for all Linux distributions and NOT for Windows, which uses DPAPI).

Important features:

- Automatically detects and handles formatting quirks that change depending on the database version.

- Converts integer column values to text to make their meaning clear.

- Supports no-keyring setups that use the default secret.

Demo

≻ ./chrdmp cookies -d data/Cookies -s "REDACTED" -o cookies.csv Extracting cookies using: Database: data/Cookies Secret: REDACTED Output File: cookies.csv

Loading database... 1630 entries loaded. DB version: 24

Summary: Successfully decrypted: 1630 entries (0/1630 empty) Skipped (no secret provided but uses non-default secret): 0 Decryption failures: 0

≻ ./chrdmp logins -d data/Login\ Data -s "REDACTED" -o psw.csv Extracting passwords using: Database: data/Login Data Secret: REDACTED Output File: psw.csv

Loading database... 125 entries loaded.

Summary: Successfully decrypted: 125 entries (5/125 empty) Skipped (no secret provided but uses non-default secret): 0 Decryption failures: 0

The decryption process is detailed in the README for anyone interested at https://github.com/asaix/chrdmp#decryption-process-explained.

Any suggestions and/or contributions would be most welcome.