Chrome App-Bound Encryption Decryption

Инструмент для расшифровки зашифрованных в App-Bound Encrypted (ABE) файлов cookie, паролей и способов оплаты из браузеров на базе Chromium (Chrome, Brave, Edge).

Особенности:

Full user-mode decryption & JSON export of cookies, passwords & payment methods.
Fileless Payload Delivery: In-memory decryption and injection of an encrypted resource, leaving no DLL on disk.
Direct syscall injection engine to bypass common endpoint defenses.
Works on Google Chrome, Brave & Edge (x64 & ARM64)
Support for multiple browser profiles (Default, Profile 1, Profile 2, etc.)
Customizable output directory for extracted data.
No admin privileges required.

Использование:

# Standard injection into a running Chrome process:
PS> .\chrome_inject.exe chrome

# Auto-start Brave and show verbose debug logs:
PS> .\chrome_inject.exe --start-browser --verbose brave

Download | Github

#malware