QAX-A-Team/BrowserGhost

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1452 stars · 209 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

BrowserGhost is a C# command-line tool for red team operators that extracts saved browser credentials, cookies, history, and bookmarks from Chrome and IE on Windows, including decrypting post-Chrome-80 password encryption. It can run as SYSTEM to harvest credentials from other users' profiles for lateral movement.

Use cases

• extract saved chrome passwords on windows
• dump browser cookies and login data during red team engagement
• harvest credentials from other users as system
• decrypt chrome 80+ saved passwords
• collect browser history and bookmarks from a compromised host

When to choose

• you are a red teamer or pentester doing post-exploitation credential collection on Windows
• you need a dependency-free .NET 2 binary that works on legacy Windows hosts
• you need to decrypt modern Chrome password encryption including Chrome 80+

When to avoid

• you need Firefox or other browser support - it is not yet implemented
• you want a maintained tool with a license and active development
• you need a defensive/audit tool rather than an offensive utility

Facets

cli-tool · maturity maintenance

security cryptography developer-tools security penetration-testing windows windows cli dotnet red-team credential-harvesting browser-passwords chrome post-exploitation csharp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="QAX-A-Team/BrowserGhost")