An open API service indexing awesome lists of open source software.

https://github.com/lowlevel01/stealthrome

POC of a Chrome Browser Password Stealer
https://github.com/lowlevel01/stealthrome

chrome stealer-browser

Last synced: 12 months ago
JSON representation

POC of a Chrome Browser Password Stealer

Awesome Lists containing this project

README

          

# stealthrome
POC of a Chrome Browser Password Stealer

The script decrypts and sends the passwords to a webhook:

![image](./webhook.png)

In practice, you could exfiltrate the master key and the database file and do the decryption locally in your machine.
The reason we create copy of the files is because they're locked since they're accessed by the Chrome process. You could kill it if you don't want to drop any files.