{"repo":"The-Viper-One/Invoke-PowerChrome","free":true,"listed":false,"github":"https://github.com/The-Viper-One/Invoke-PowerChrome","clone":"git clone https://github.com/The-Viper-One/Invoke-PowerChrome.git","description":"Decrypt Chromium based browser passwords with PowerShell.","language":"PowerShell","stars":150,"topics":["chrome","dpapi","hacking","pentesting","powershell"],"license":null,"category":"security-tools","readme_excerpt":"Invoke-PowerChrome A PowerShell script for decrypting Chromium-based browser passwords, supporting both v10 (DPAPI user) and Google Chrome v20 (App Bound Encryption) encrypted blobs. The script dynamically interacts with Windows cryptographic APIs to decrypt passwords without external dependencies and can be executed in memory. This code is based on the following PoC: https://github.com/runassu/chrome v20 decryption Microsoft Edge / Chromium v10 Blobs Requirements - No special privileges required - Runs in current user context Process Overview - Read Local State file → get os crypt.encrypted key . - Strip DPAPI prefix → DPAPI Unprotect (CurrentUser) → derive master key. - AES-GCM decrypt password blobs in Login Data with the master key. Google Chrome v20 blobs (App Bound Encryption) Requirements - Administrative rights (to impersonate SYSTEM) Process Overview - Read Local State file → get os crypt.app bound encrypted key - Impersonate SYSTEM → DPAPI Unprotect (SYSTEM) → Rev2self → DPAPI Unprotect (CurrentUser). - Parse flag-3 blob → extract encrypted aes key , iv , ciphertext , tag . - Open NCrypt key \"Google Chromekey1\" → Decrypt → XOR with fixed 32-byte hardcoded key from elevation service.exe → derive aes key . - AES-GCM decrypt (iv, ciphertext, tag) with aes key → get app bound key . - AES-GCM decrypt password blobs in Login Data with the app bound key . Usage Load into memory Example Commands Example Output Future Work Future updates will bring the following updates: - C","default_branch":null,"files":null,"tree":[],"storefront":"/r/The-Viper-One","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/The-Viper-One/Invoke-PowerChrome/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}