Browser Artifacts

Chrome Password Dumper: Guide to Browser Password Recovery | Red Team Leadersdocs.redteamleaders.com

GitHub - CyberSecurityUP/ChromePasswordDumper: Chrome Dump PasswordGitHub

GitHub - AlessandroZ/LaZagne: Credentials recovery projectGitHub

GitHub - The-Viper-One/Invoke-PowerChrome: Decrypt Chromium based browser passwords with PowerShell.GitHub

GitHub - gustavoparedes/Browser-Reviewer: Browser Reviewer is a portable forensic tool for analyzing user activity in Firefox and Chrome-based browsers. It extracts and displays browsing history, downloads, bookmarks, and autofill data. The tool allows analysts to tag, comment, and export reports in PDF.GitHub

Mimikatz

Mimikatz is the premier credential extraction tool for Windows environments, with specific capabilities for Chrome password recovery:

Extract DPAPI master keys

mimikatz # dpapi::chrome

Dump process memory for analysis

mimikatz # sekurlsa::minidump chrome.dmp

Extract credentials from live processes

mimikatz # sekurlsa::logonpasswords

Logs Locations

• Apache: /var/www/html/ Default on most Linux distros

• Nginx: /usr/share/nginx/html/ Default on many Linux setups