Decrypt Google Chrome and Chromium Passwords on Mac OS X. No dependencies, quick, fast.
These are the passwords saved via the "Would you like to remember this password" popup when you login to a website.
Great for if you want to export all of your passwords with one command, as oppposed to manually selecting each one through Chrome's UI.
Also great for forensic analysis, as you can obtain the safe storage key through a variety of methods.
- Look for any encrypted password data stored in
~/Library/Application Support/Google/Chrome/*/Login Data - Get the decryption key from the keychain WITHOUT having to confirm the users password!
- Use this key to decrypt the passwords.
- Print out all of the passwords in a user friendly format.
python ChromePasswords.py
Then confirm keychain access by clicking "allow"
OUTPUT:
[1] https://xxxxxxxx.yyyyyyy.zzzzzzz/login.php
User: bobloblaw
Pass: supersecretpassword
[2] https://timcook.apple.com/apple-login
User: tim
Pass: cook1010101