6 Commits

Author	SHA1	Message	Date
Roger	ecf8ba0585	refactor(browser): simplify credential storage config (#593)	2026-05-14 16:29:35 +08:00
Roger	15680c1512	refactor(keyretriever): reduce duplicate master-key WARN logs (#589)	2026-04-25 22:00:33 +08:00
Roger	e50c623db0	fix: retrieve correct ABE master key when browser is running (#577) ... * fix(windows): retrieve correct ABE master key when browser is running	2026-04-19 20:07:51 +08:00
Roger	370c5882c4	feat: add Safari password extraction from macOS Keychain (#568)	2026-04-13 21:34:40 +08:00
Roger	ccc8643d86	feat: add interactive terminal password prompt for keychain unlock (#558) ... * feat(darwin): add interactive terminal password prompt for keychain unlock (#556) * test: add unit tests for keyretriever and address review feedback - Add errStorageNotFound sentinel error for precise error matching - Non-TTY TerminalPasswordRetriever returns nil silently (review #558) - Add darwin tests: findStorageKey, empty password, non-TTY skip - Add linux tests: FallbackRetriever peanuts key, DefaultRetriever chain * fix: add nolint:unused for errStorageNotFound on Windows, clean up error message errStorageNotFound is only used on darwin/linux; Windows lint flagged it as unused. Also simplify error format to avoid "storage" duplication. * fix: add nolint:unused for errStorageNotFound, simplify error message errStorageNotFound is only referenced on darwin and linux; Windows lint flags it as unused. Also remove redundant "storage" prefix from the error format string.	2026-04-06 01:27:13 +08:00
Roger	9fb5165fcb	feat: add crypto/keyretriever with keychainbreaker integration (#518) ... * feat: add crypto/keyretriever package for Chromium master key retrieval * feat: complete keyretriever with gcoredump, chainbreaker, and tests * refactor: replace internal chainbreaker with keychainbreaker v0.1.0 Replace the incomplete internal chainbreaker implementation (~1400 lines of duplicated code) with the external keychainbreaker package, which provides a complete, well-tested keychain parsing library. Changes: - Add github.com/moond4rk/keychainbreaker v0.1.0 dependency - Update gcoredump_darwin.go to use keychainbreaker API (Open/Unlock/GenericPasswords) - Add KeychainPasswordRetriever for password-based keychain unlocking with sync.Once caching across multiple browser queries - Unify DefaultRetriever(keychainPassword string) signature across all platforms - Delete utils/chainbreaker/ (696 lines + test + testdata) - Delete crypto/keyretriever/chainbreaker_darwin.go (696 lines duplicate) - Delete browser/exploit/gcoredump/ (duplicate of keyretriever version) - Update chromium_darwin.go to use keyretriever.DecryptKeychain - Clean up .golangci.yml lint exceptions and .gitignore entries - Use errors.Is() instead of == for context.DeadlineExceeded check * refactor: improve gcoredump exploit code quality and add comments * fix: address Copilot review feedback on keyretriever	2026-04-04 01:41:01 +08:00