https://github.com/bats3c/ChromeTools

A collection of tools to abuse chrome browser
https://github.com/bats3c/ChromeTools

Last synced: 22 days ago
JSON representation

A collection of tools to abuse chrome browser

• Host: GitHub
• URL: https://github.com/bats3c/ChromeTools
• Owner: bats3c
• License: mit
• Created: 2021-01-09T19:43:06.000Z (almost 4 years ago)
• Default Branch: main
• Last Pushed: 2021-01-15T09:46:42.000Z (almost 4 years ago)
• Last Synced: 2024-11-19T05:59:34.426Z (24 days ago)
• Language: C++
• Homepage: https://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors/
• Size: 48.5 MB
• Stars: 286
• Watchers: 11
• Forks: 56
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - bats3c/ChromeTools - A collection of tools to abuse chrome browser (C++)

README

        
# ChromeTools

https://www.mdsec.co.uk/2021/01/breaking-the-browser-a-tale-of-ipc-credentials-and-backdoors/

Tools to abuse chrome

- ChromeTap

  Log all data sent by chrome to disk, allowing you to extract cookies and credentials with the `hunt.py` tool or manual review.

- ChromeBackdoor

  Turn chrome into a backdoor forcing it to execute any code between `` tags. Using this along side a persistence method will allow you to retain access to a machine without having a beacon. All the user has to do is click a link, open an email or view an 'image' containing these tags and your shellcode.

  

- SSLSteal

  Steal data from chrome's SSL encryption routine.