6 Commits

Author	SHA1	Message	Date
Roger	ecf8ba0585	refactor(browser): simplify credential storage config (#593)	2026-05-14 16:29:35 +08:00
Roger	7b9a973c9c	fix: per-tier master-key retrievers for mixed-cipher profiles (#579) ... * fix: per-tier master-key retrievers for mixed-cipher profiles	2026-04-20 17:33:38 +08:00
Roger	370c5882c4	feat: add Safari password extraction from macOS Keychain (#568)	2026-04-13 21:34:40 +08:00
Roger	ccc8643d86	feat: add interactive terminal password prompt for keychain unlock (#558) ... * feat(darwin): add interactive terminal password prompt for keychain unlock (#556) * test: add unit tests for keyretriever and address review feedback - Add errStorageNotFound sentinel error for precise error matching - Non-TTY TerminalPasswordRetriever returns nil silently (review #558) - Add darwin tests: findStorageKey, empty password, non-TTY skip - Add linux tests: FallbackRetriever peanuts key, DefaultRetriever chain * fix: add nolint:unused for errStorageNotFound on Windows, clean up error message errStorageNotFound is only used on darwin/linux; Windows lint flagged it as unused. Also simplify error format to avoid "storage" duplication. * fix: add nolint:unused for errStorageNotFound, simplify error message errStorageNotFound is only referenced on darwin and linux; Windows lint flags it as unused. Also remove redundant "storage" prefix from the error format string.	2026-04-06 01:27:13 +08:00
Roger	410bffe643	refactor: naming cleanup and crypto package improvements (#551) ... * refactor: naming cleanup across all packages	2026-04-05 16:51:56 +08:00
Roger	9fb5165fcb	feat: add crypto/keyretriever with keychainbreaker integration (#518) ... * feat: add crypto/keyretriever package for Chromium master key retrieval * feat: complete keyretriever with gcoredump, chainbreaker, and tests * refactor: replace internal chainbreaker with keychainbreaker v0.1.0 Replace the incomplete internal chainbreaker implementation (~1400 lines of duplicated code) with the external keychainbreaker package, which provides a complete, well-tested keychain parsing library. Changes: - Add github.com/moond4rk/keychainbreaker v0.1.0 dependency - Update gcoredump_darwin.go to use keychainbreaker API (Open/Unlock/GenericPasswords) - Add KeychainPasswordRetriever for password-based keychain unlocking with sync.Once caching across multiple browser queries - Unify DefaultRetriever(keychainPassword string) signature across all platforms - Delete utils/chainbreaker/ (696 lines + test + testdata) - Delete crypto/keyretriever/chainbreaker_darwin.go (696 lines duplicate) - Delete browser/exploit/gcoredump/ (duplicate of keyretriever version) - Update chromium_darwin.go to use keyretriever.DecryptKeychain - Clean up .golangci.yml lint exceptions and .gitignore entries - Use errors.Is() instead of == for context.DeadlineExceeded check * refactor: improve gcoredump exploit code quality and add comments * fix: address Copilot review feedback on keyretriever	2026-04-04 01:41:01 +08:00