{"adoption": {"forks": 297, "observed_at": "2026-08-28T04:05:32.834178+00:00", "stars": 1762}, "canonical_url": "https://ross.abutalabs.com/products/chrome-app-bound-encryption-decryption", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-mode,   no admin required.", "domain": ["security", "penetration-testing", "reverse-engineering", "windows", "privacy"], "enriched": true, "function": ["security", "penetration-testing", "reverse-engineering", "cryptography", "cli"], "health_score": 77, "homepage": "https://primepage.de", "language": "C", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["xaitax/Chrome-App-Bound-Encryption-Decryption"], "name": "xaitax/Chrome-App-Bound-Encryption-Decryption", "platform": ["windows", "cli"], "pushed_at": "2026-02-09T18:52:43+00:00", "repo": "xaitax/Chrome-App-Bound-Encryption-Decryption", "stars": 1762, "tags": ["app-bound-encryption", "chromium", "process-hollowing", "direct-syscalls", "reflective-dll-injection", "credential-extraction", "post-exploitation", "edr-evasion", "fileless-malware", "red-team"], "topics": ["app-bound", "brave", "chrome", "chromium", "dll-injection", "edge", "ielevator", "cookies", "payment", "passwords", "ielevator2"], "urls": [], "use_cases": ["decrypt chrome app-bound encryption cookies", "extract saved passwords from chromium browsers", "bypass app-bound encryption on windows", "red team tool for browser credential extraction", "demonstrate process hollowing with direct syscalls", "retrieve payment card data from chrome profiles", "fileless in-memory browser data decryption", "security research on chromium ABE COM server"], "what_it_is": "A Windows post-exploitation research tool that bypasses Chromium's App-Bound Encryption using direct syscall-based reflective process hollowing to decrypt browser data in memory. It extracts cookies, passwords, payment methods, and tokens from Chrome, Edge, Brave, and Avast without admin rights or disk writes.", "when_to_avoid": ["you want to recover your own lost browser passwords through legitimate means", "you need a cross-platform or defensive/analysis tool rather than an offensive exploit", "your environment or jurisdiction prohibits use of credential-extraction tooling"], "when_to_choose": ["you are an authorized red teamer or pentester demonstrating browser credential theft on Windows", "you research Chromium's App-Bound Encryption internals and COM-based security model", "you need a fileless, user-mode proof of concept that evades user-land API hooks"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/chrome-app-bound-encryption-decryption", "repo": "xaitax/Chrome-App-Bound-Encryption-Decryption", "role": "main", "score": 63}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:32.834178+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:27:03.020705+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "0a4bfaa8e63bdaf72bca19a01e9a2506a61695edf45b0087187a05680bc30fbb", "fetched_at": "2026-08-28T04:05:32.834178+00:00", "kind": "readme", "missing": false, "url": "https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption"}, {"content_hash": "33a8b8d707dcc76d3ee03e19f92a9fd61ba0446445bb2ecacdc38284810ae5a8", "fetched_at": "2026-08-29T11:05:21.679246+00:00", "kind": "homepage", "missing": false, "url": "https://primepage.de"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 66, "longevity": 48, "rhythm": 69}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 675, "days_push": 205, "days_rel": 209, "gap_med": 7.5, "n_releases_24m": 21}, "score": 63, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}