Ross ROSS = Recommend OSS · open-source software intelligence for agents

Meckazin/ChromeKatz

Dump cookies and credentials directly from Chrome/Edge process memory observed · 2026-08-28

github.com/Meckazin/ChromeKatz · C · BSD-3-Clause (permissive) observed · 2026-08-28

Health v2 · maintenance only

72/100

  • Activity 76
  • Release rhythm 66
  • Longevity 71
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 19.0
  • age_days: 1000
  • days_rel: 226
  • days_push: 146
  • n_releases_24m: 9

Full methodology

Adoption not part of the score

1495 stars · 137 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ChromeKatz is a set of offensive security tools (CookieKatz, ElevationKatz) written in C that dump cookies and decryption keys directly from the memory of Chromium-based browsers like Chrome and Edge. It ships as standalone executables, Cobalt Strike Beacon Object Files, and a minidump parser, including an injection mode to bypass App-Bound Encryption.

Use cases

  • dump cookies from chrome process memory
  • extract edge browser cookies without touching disk
  • bypass chrome app-bound encryption
  • parse cookies offline from a browser minidump
  • retrieve cookies from incognito or in-private sessions
  • get chrome decryption key from the elevation service
  • dump webview2 cookies from a running process

When to choose

  • you are a red team operator or pentester needing live session cookies from Chromium browsers on Windows
  • you want to avoid touching on-disk cookie databases or needing DPAPI keys
  • you need a BOF variant to run within a C2 agent
  • you must analyze cookies offline from a captured minidump

When to avoid

  • you need a defensive or forensic auditing tool with logging and alerting
  • you target 32-bit browser installations, which are unsupported
  • you need partitioned (CHIPS) cookies, which are not currently dumped
  • you want a cross-platform solution - this is Windows-only

Facets

cli-tool · maturity active

security penetration-testing cryptography security penetration-testing windows windows cli credential-dumping cookie-extraction red-team beacon-object-file chromium app-bound-encryption minidump offensive-security

1 source

Member repositories

RepositoryRoleHealth v2
Meckazin/ChromeKatzmain72

For agents

markdown · JSON · MCP: product_card(name="Meckazin/ChromeKatz")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem