BrowserSnatch is a powerful and versatile tool designed to "snatch" sensitive data from a variety of web browsers. This tool targets both Chromium-based browsers (such as Edge, Chrome, Opera, etc.) and Gecko-based browsers (such as Firefox, Thunderbird, etc.) overall including more than 40 browsers, making it a comprehensive solution for browser data extraction.

• Snatch Latest App-Bound Encrypted data: Extract and decrypt latest app-bound encrypted data (chrome, edge, brave)
• Snatch Saved Passwords: Effortlessly retrieve stored passwords from all major Chromium and Gecko-based browsers
• Snatch Cookies: Extract cookies from user profiles across multiple browsers
• Snatch Bookmarks: Snatch all saved bookmarks from every browser
• Snatch History: Now supports snatching of history across all browsers
• Super Fast: Written in c/c++ with very fast performance
• Easy to Use: No complicated setup or configuration required
• Zero External Dependencies: Completely written in c/c++, with little to no need for additional libraries
• Cross-Browser Support: Handles both Chromium and Gecko-based browsers with ease
• Greed Mode: Greed mode included which snatches everything in a single stealer db

BrowserSnatch is a tool designed for legal, ethical penetration testing and educational purposes only. The author is NOT responsible for any misuse or illegal activities performed using this tool. Always ensure you have proper authorization before testing any system or network.

By using BrowserSnatch, you agree to:

• Use this tool in compliance with all local, state, and federal laws
• Obtain proper authorization before testing any system or network
• Respect privacy and confidentiality when handling data

• Clone the repository
• Open in Visual Studio
• ISO C++17 Standard (/std:c++17) or higher
• Include missing packages (eg; nlohmann) using Visual Studio NuGet installer
• Compile

To run BrowserSnatch, simply execute the binary from the command line. The tool will operate in default mode if no parameter is provided.

Default Mode

• No Parameter Provided: Executes with default settings and attempts to snatch all saved passwords and cookies

CommandLine Mode

• Parameter: -h: Displays a help menu detailing all available options.

  Password Snatching

  • Parameter: -pass: Snatch passwords from every browser.
  • Parameter: -pass -c: Snatch passwords from Chromium-based browsers only.
  • Parameter: -pass -g: Snatch passwords from Gecko-based browsers only.

  Cookie Snatching

  • Parameter: -cookies: Snatch cookies from every browser.
  • Parameter: -cookies -c: Snatch cookies from Chromium-based browsers only.
  • Parameter: -cookies -g: Snatch cookies from Gecko-based browsers only.
  • Parameter: -app-bound-decryption: Snatch cookies from latest v20 app bound encryption only (requires admin)

  Bookmarks Snatching

  • Parameter: -bookmarks: Snatch bookmarks from every browser.
  • Parameter: -bookmarks -c: Snatch bookmarks from Chromium-based browsers only.
  • Parameter: -bookmarks -g: Snatch bookmarks from Gecko-based browsers only.

  History Snatching

  • Parameter: -history: Snatch history from every browser.
  • Parameter: -history -c: Snatch history from Chromium-based browsers only.
  • Parameter: -history -g: Snatch history from Gecko-based browsers only.

  Greed Mode

  • Parameter: -greed: Snatch everything from every browser and save in a single stealer database.

  NOTE

  • If fails to snatch cookies or passwords, RUN -app-bound-decryption mode first.
  • If still fails, run -recalibrate mode.

Help Menu

• Run the following command to start BrowserSnatch in default mode:

./BrowserSnatch

• To see the user-friendly console interface, use:

./BrowserSnatch -console-mode

• To see help menu, use:

./BrowserSnatch -h

• To Snatch all browser passwords, use:

./BrowserSnatch -pass

• To Snatch all browser cookies, use:

./BrowserSnatch -cookies

• To Snatch chrome v20 app-bound encrypted browser cookies, use:

./BrowserSnatch -app-bound-decryption

• To Snatch all browser bookmarks, use:

./BrowserSnatch -bookmarks

• To Snatch all browser history, use:

./BrowserSnatch -history

• To Snatch Everything from Every Browser, use Greed mode:

./BrowserSnatch -greed

Following GIF demonstrates the working of BrowserSnatch and how its stealer log can be accessed.

Demo

• Stability: More stable tool
• Less Noise: Better with leaving residue on systems

Stay tuned for future releases!

For any inquiries or contributions, feel free to reach out to the author or contribute directly via GitHub Issues.

• Inspiration from Project by SaulBerrenson called BrowserStealer.
• Chrome key & password decryption from 0x00sec.
• App-Bound encryption key PoC snovvcrash.
• Other browser support xaitax.