mandatoryprogrammer/CursedChrome

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1728 stars · 250 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CursedChrome is a Chrome extension implant that converts a victim's Chrome browser into a fully-functional HTTP proxy, letting an operator browse the web authenticated as the victim. It is designed for professional red teams to simulate malicious browser extension attacks against BeyondCorp/zero-trust environments.

Use cases

• simulate malicious browser extension attacks in red team engagements
• proxy web traffic through a compromised browser session
• test defenses against browser extension implants
• access web apps authenticated as a victim during authorized penetration tests
• demonstrate BeyondCorp zero-trust bypass via browser session hijacking

When to choose

• you are a red teamer emulating browser-extension-based attacks
• you need to route traffic through a victim's authenticated browser session with correct source IP, cookies, and client certificates
• you are testing defenses against malicious extensions in Chrome or Chrome OS environments

When to avoid

• you want a general-purpose proxy or VPN for personal use
• you lack explicit authorization to test the target systems
• you need a defensive tool - use the author's ChromeGalvanizer instead

Facets

plugin · maturity active

security proxy browser-extension penetration-testing security penetration-testing browser-extensions browser browser-extension red-team chrome-extension http-proxy session-hijacking offensive-security beyondcorp

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mandatoryprogrammer/CursedChrome")