详解python如何提取浏览器中保存的网站登录用户名密码

local_computer_directory_path = os.path.join(os.environ["USERPROFILE"], "AppData", "Local", "Google", "Chrome","User Data", "Local State")

import os,json,base64,sqlite3,win32crypt,shutil
from Cryptodome.Cipher import AES
#需要安装pip install pycryptodomex 库
from datetime import  datetime, timedelta
def fetching_encryption_key():
    '''动态获取保存用户数据的文件的路径，然后读出加密后的密文'''
    local_computer_directory_path = os.path.join(os.environ["USERPROFILE"], "AppData", "Local", "Google", "Chrome","User Data", "Local State")
    with open(local_computer_directory_path, "r", encoding="utf-8") as f:
        local_state_data = f.read()
        local_state_data = json.loads(local_state_data)
    # decoding the encryption key using base64
    encryption_key = base64.b64decode(
    local_state_data["os_crypt"]["encrypted_key"])
    # remove Windows Data Protection API (DPAPI) str
    encryption_key = encryption_key[5:]
    # return decrypted key
    return win32crypt.CryptUnprotectData(encryption_key, None, None, None, 0)[1]

def password_decryption(password, encryption_key):
    try:
        iv = password[3:15]
        password = password[15:]
        # generate cipher
        cipher = AES.new(encryption_key, AES.MODE_GCM, iv)
        # decrypt password
        return cipher.decrypt(password)[:-16].decode()
    except:
        try:
            return str(win32crypt.CryptUnprotectData(password, None, None, None, 0)[1])
        except:
            return "No Passwords"

def get_url_credential(base_url):
    '''如果chrome浏览器本地存储了OA密码，则返回用户和密码列表，否则返回False'''
    key = fetching_encryption_key()
    db_path = os.path.join(os.environ["USERPROFILE"], "AppData", "Local",
                        "Google", "Chrome", "User Data", "default", "Login Data")
    filename = "ChromePasswords.db"
    shutil.copyfile(db_path, filename) # 为了避免程序bug将原有的login Data 文件损坏，复制一份出来供程序用
    # connecting to the database
    db = sqlite3.connect(filename)
    cursor = db.cursor()
    cursor.execute("select origin_url, action_url, username_value, password_value, date_created, date_last_used from logins order by date_last_used")
    user_name,pass_word=None,None
    userInfos=[] # 用于存放多组同一个网站的用户名 密码
    for row in cursor.fetchall():
        main_url = row[0]
        if base_url in main_url:
            user_name = row[2]
            pass_word = password_decryption(row[3], key)
            userInfos.append([user_name,pass_word])
    cursor.close()
    db.close()
    try:
        os.remove(filename)
    except:
        pass
    return userInfos