Skip to content

keychainbreaker v0.1.0 - Initial Release

Choose a tag to compare

View all tags
@moonD4rk moonD4rk released this 28 Mar 10:25
v0.1.0
6956d24
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Go library for reading and decrypting macOS Keychain files. Supports OS X 10.6 through macOS 26 (Tahoe).

Library

  • Open API (#6): Functional options for open keychain databases.
  • Unlock methods (#3, #4): WithPassword (PBKDF2-HMAC-SHA1) and WithKey (hex-encoded master key)
  • Generic passwords (#3): Decrypt app-stored credentials (Chrome Safe Storage, Wi-Fi, etc.)
  • Internet passwords (#7): Decrypt web/network credentials (GitHub tokens, Docker registry, SMB shares, etc.)
  • Private keys (#8): Decrypt RSA/EC private keys using RFC 3217 full-reverse unwrap
  • X.509 certificates (#8): Read DER-encoded certificates
  • Password hash export (#3): Export hash for offline cracking (hashcat mode 23100 / John the Ripper)
  • Dynamic schema (#3): Discovers table schemas at runtime, no hardcoded struct layouts

Architecture

  • Zero external dependencies (standard library only, PBKDF2 inlined)
  • Cross-platform: compiles on Linux, macOS, and Windows
  • 28 unit and integration tests with race detection
  • RFC 001: macOS Keychain Encryption specification
  • RFC 002: API design document

Install

go get github.com/moond4rk/keychainbreaker@v0.1.0

Full Changelog: https://github.com/moonD4rk/keychainbreaker/commits/v0.1.0

Assets 2
Loading