BrowserSnatch is a powerful browser stealer or browser data extraction tool intended to be used for ethical hacking or penetration testing.
☆333Oct 31, 2026Updated last week
Alternatives and similar repositories for BrowserSnatch
Users that are interested in BrowserSnatch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump cookies and credentials directly from Chrome/Edge process memory☆1,505Apr 9, 2026Updated 6 months ago
- LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and r…☆386Apr 26, 2025Updated last year
- Extract and execute a PE embedded within a PNG file using an LNK file.☆483Nov 2, 2024Updated 2 years ago
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆612Aug 17, 2026Updated 2 months ago
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆171May 28, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago
- ☆110Aug 21, 2024Updated 2 years ago
- Bypassing UAC with SSPI Datagram Contexts☆474Sep 24, 2023Updated 3 years ago
- Process injection alternative☆406Sep 6, 2024Updated 2 years ago
- ☆416Dec 8, 2024Updated last year
- Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advance…☆592May 22, 2025Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆218Oct 19, 2024Updated 2 years ago
- .NET CLR-Stomping☆148May 20, 2026Updated 5 months ago
- A BOF that runs unmanaged PEs inline☆707Oct 23, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Port of Cobalt Strike's Process Inject Kit☆195Dec 1, 2024Updated last year
- ☆127Sep 1, 2024Updated 2 years ago
- BOF to steal browser cookies & credentials☆582Jul 23, 2026Updated 3 months ago
- BOF to run PE in Cobalt Strike Beacon without console creation☆198Nov 23, 2025Updated 11 months ago
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- SharpSilentChrome is a C# project that "silently" installs browser extensions on Google Chrome or MS Edge by updating the browsers' Prefe…☆210Mar 19, 2026Updated 7 months ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆642Jan 2, 2025Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆462Dec 21, 2023Updated 2 years ago
- Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods…☆1,853Feb 9, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆168Jan 27, 2025Updated last year
- Ghosting-AMSI☆252Apr 24, 2025Updated last year
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆442Sep 29, 2025Updated last year
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,324Jun 21, 2024Updated 2 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆365Nov 19, 2024Updated last year
- ☆181Mar 27, 2023Updated 3 years ago
- A runtime for developing large-scale and complex PIC module.☆21Sep 15, 2026Updated last month
- A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …☆194Apr 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…☆480Aug 10, 2026Updated 2 months ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆816Jan 26, 2026Updated 9 months ago
- Cobalt Strike BOF for evasive .NET assembly execution☆329Mar 31, 2025Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Fileless atexec, no more need for port 445☆414Mar 28, 2024Updated 2 years ago
- ☆200Mar 28, 2025Updated last year
- ☆246Sep 19, 2023Updated 3 years ago