Meckazin/ChromeKatz
Dump cookies and credentials directly from Chrome/Edge process memory observed · 2026-08-28
Health v2 · maintenance only
72/100
- Activity 76
- Release rhythm 66
- Longevity 71
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 19.0
- age_days: 1000
- days_rel: 226
- days_push: 146
- n_releases_24m: 9
Adoption not part of the score
1495 stars · 137 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
ChromeKatz is a set of offensive security tools (CookieKatz, ElevationKatz) written in C that dump cookies and decryption keys directly from the memory of Chromium-based browsers like Chrome and Edge. It ships as standalone executables, Cobalt Strike Beacon Object Files, and a minidump parser, including an injection mode to bypass App-Bound Encryption.
Use cases
- dump cookies from chrome process memory
- extract edge browser cookies without touching disk
- bypass chrome app-bound encryption
- parse cookies offline from a browser minidump
- retrieve cookies from incognito or in-private sessions
- get chrome decryption key from the elevation service
- dump webview2 cookies from a running process
When to choose
- you are a red team operator or pentester needing live session cookies from Chromium browsers on Windows
- you want to avoid touching on-disk cookie databases or needing DPAPI keys
- you need a BOF variant to run within a C2 agent
- you must analyze cookies offline from a captured minidump
When to avoid
- you need a defensive or forensic auditing tool with logging and alerting
- you target 32-bit browser installations, which are unsupported
- you need partitioned (CHIPS) cookies, which are not currently dumped
- you want a cross-platform solution - this is Windows-only
Facets
cli-tool · maturity active
security penetration-testing cryptography security penetration-testing windows windows cli credential-dumping cookie-extraction red-team beacon-object-file chromium app-bound-encryption minidump offensive-security
1 source
- readme: https://github.com/Meckazin/ChromeKatz · fetched 2026-08-28 · bd9644a14674
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Meckazin/ChromeKatz | main | 72 |
For agents
markdown · JSON · MCP: product_card(name="Meckazin/ChromeKatz")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem