v0.2.6

Changelog

• ab7665e: chore: update CLI dependency to v0.2.5 (#21) (@moonD4rk)
• 92e1cbd: ci: run the two-step release via the shared GitHub App (#22) (@moonD4rk)
• 60dd1df: feat: detect blob version and reject v2 offline password unlock (#23) (@moonD4rk)

v0.2.5

Changelog

• dbd007f: feat: add Logger interface and --verbose CLI flag (#20) (@moonD4rk)

v0.2.4

Changelog

• f4da54d: feat: add CLI tool for keychain extraction (#13) (@moonD4rk)
• 9649aaf: feat: add TryUnlock for metadata extraction without successful decryption (#12) (@moonD4rk)
• ac092c0: fix: fix release workflow GoReleaser tag mismatch (#14) (@moonD4rk)
• 7282999: fix: use PAT for go.mod update PR to trigger CI (#16) (@moonD4rk)

keychainbreaker v0.1.0 - Initial Release

Go library for reading and decrypting macOS Keychain files. Supports OS X 10.6 through macOS 26 (Tahoe).

Library

• Open API (#6): Functional options for open keychain databases.
• Unlock methods (#3, #4): WithPassword (PBKDF2-HMAC-SHA1) and WithKey (hex-encoded master key)
• Generic passwords (#3): Decrypt app-stored credentials (Chrome Safe Storage, Wi-Fi, etc.)
• Internet passwords (#7): Decrypt web/network credentials (GitHub tokens, Docker registry, SMB shares, etc.)
• Private keys (#8): Decrypt RSA/EC private keys using RFC 3217 full-reverse unwrap
• X.509 certificates (#8): Read DER-encoded certificates
• Password hash export (#3): Export hash for offline cracking (hashcat mode 23100 / John the Ripper)
• Dynamic schema (#3): Discovers table schemas at runtime, no hardcoded struct layouts

Architecture

• Zero external dependencies (standard library only, PBKDF2 inlined)
• Cross-platform: compiles on Linux, macOS, and Windows
• 28 unit and integration tests with race detection
• RFC 001: macOS Keychain Encryption specification
• RFC 002: API design document

Install

go get github.com/moond4rk/keychainbreaker@v0.1.0

Full Changelog: https://github.com/moonD4rk/keychainbreaker/commits/v0.1.0