9 Commits

Author	SHA1	Message	Date
Roger	ecf8ba0585	refactor(browser): simplify credential storage config (#593)	2026-05-14 16:29:35 +08:00
Roger	15680c1512	refactor(keyretriever): reduce duplicate master-key WARN logs (#589)	2026-04-25 22:00:33 +08:00
Roger	7b9a973c9c	fix: per-tier master-key retrievers for mixed-cipher profiles (#579) ... * fix: per-tier master-key retrievers for mixed-cipher profiles	2026-04-20 17:33:38 +08:00
Roger	370c5882c4	feat: add Safari password extraction from macOS Keychain (#568)	2026-04-13 21:34:40 +08:00
Roger	a0b4412bf2	fix: share key retriever across all browsers to avoid repeated prompts (#560) ... * fix: share key retriever across all browsers to avoid repeated password prompts	2026-04-06 21:57:52 +08:00
Roger	ccc8643d86	feat: add interactive terminal password prompt for keychain unlock (#558) ... * feat(darwin): add interactive terminal password prompt for keychain unlock (#556) * test: add unit tests for keyretriever and address review feedback - Add errStorageNotFound sentinel error for precise error matching - Non-TTY TerminalPasswordRetriever returns nil silently (review #558) - Add darwin tests: findStorageKey, empty password, non-TTY skip - Add linux tests: FallbackRetriever peanuts key, DefaultRetriever chain * fix: add nolint:unused for errStorageNotFound on Windows, clean up error message errStorageNotFound is only used on darwin/linux; Windows lint flagged it as unused. Also simplify error format to avoid "storage" duplication. * fix: add nolint:unused for errStorageNotFound, simplify error message errStorageNotFound is only referenced on darwin and linux; Windows lint flags it as unused. Also remove redundant "storage" prefix from the error format string.	2026-04-06 01:27:13 +08:00
Roger	410bffe643	refactor: naming cleanup and crypto package improvements (#551) ... * refactor: naming cleanup across all packages	2026-04-05 16:51:56 +08:00
Roger	a58d432688	fix: cache keychain retriever across browser profiles on macOS (#545) ... Share a single KeyRetriever instance across all profiles of the same browser, and add sync.Once caching to GcoredumpRetriever and SecurityCmdRetriever. This avoids repeated keychain password prompts (or securityd memory dumps) when extracting multiple profiles. Closes #544	2026-04-04 18:36:49 +08:00
Roger	9fb5165fcb	feat: add crypto/keyretriever with keychainbreaker integration (#518) ... * feat: add crypto/keyretriever package for Chromium master key retrieval * feat: complete keyretriever with gcoredump, chainbreaker, and tests * refactor: replace internal chainbreaker with keychainbreaker v0.1.0 Replace the incomplete internal chainbreaker implementation (~1400 lines of duplicated code) with the external keychainbreaker package, which provides a complete, well-tested keychain parsing library. Changes: - Add github.com/moond4rk/keychainbreaker v0.1.0 dependency - Update gcoredump_darwin.go to use keychainbreaker API (Open/Unlock/GenericPasswords) - Add KeychainPasswordRetriever for password-based keychain unlocking with sync.Once caching across multiple browser queries - Unify DefaultRetriever(keychainPassword string) signature across all platforms - Delete utils/chainbreaker/ (696 lines + test + testdata) - Delete crypto/keyretriever/chainbreaker_darwin.go (696 lines duplicate) - Delete browser/exploit/gcoredump/ (duplicate of keyretriever version) - Update chromium_darwin.go to use keyretriever.DecryptKeychain - Clean up .golangci.yml lint exceptions and .gitignore entries - Use errors.Is() instead of == for context.DeadlineExceeded check * refactor: improve gcoredump exploit code quality and add comments * fix: address Copilot review feedback on keyretriever	2026-04-04 01:41:01 +08:00