v1.2.0 — Account Passwords and a Rebuilt Core

v1.2.0 rebuilds HackBrowserData's internals as a single pipeline and fixes a batch of long-standing issues. Commands, flags, output files, and keys.json stay compatible with v1.1.0.

New

• Passwords saved to the Google account (Login Data For Account) are exported too; a new store column says local or account (#637)
• Cookies gain a same_site field (#628)
• Browser from Vought support on Windows (#622)
• --keychain-pw-stdin reads the macOS keychain password from stdin

Fixed

• macOS asks for the keychain password only when a selected category needs a key (#570)
• -p accepts the profile path shown in chrome://version and reads just that profile (#481, #485)
• CocCoc cookies decrypt on Windows hosts that also have Yandex installed
• --zip no longer loses data, and --zip and archive output is owner-only (0600)
• Firefox logins and Yandex logins and cards export with empty secrets when the key is missing, instead of a panic or nothing
• Invalid input exits with code 1 before writing anything; Ctrl-C, SIGTERM, and SIGHUP stop cleanly
• Windows: sturdier ABE payload injection (#638)

Output changes

• Firefox history order, Firefox bookmark fields, and Safari bookmark IDs are fixed
• Rows with equal sort keys keep the browser's own order
• restore labels rows with the browser's display name instead of its vault key

Notes

• macOS release builds no longer include the gcore keychain path; it is opt-in through the keychain_gcore build tag (#629)
• Go 1.20 remains the minimum supported Go version

Full Changelog: v1.1.0...v1.2.0