+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Malware and Viruses (https://hackforums.net/forumdisplay.php?fid=287)
+---- Thread: Introducing chrome_v20_decryption_CSharp (/showthread.php?tid=6311110)
Introducing chrome_v20_decryption_CSharp - PhillyStyle - Oct 13, 2025
I got to 50 posts, so now I can share some of my work. The first project I am posting of mine, is a Chrome v20 decrypter made in C#.
It can decrypt Login Info (passwords), and Cookies, it can also get history, and download information.
I made this in C# because all I could find was a python example code for v20 passwords. Most of the Chrome password decrypters out there just don't work on v20.
Notes:
- You have to compile yourself.
- It is totally harmless. Not a virus. It simply decrypts / gathers info and prints to screen.
- Windows defender sees it as a virus due to the SQLiteReader.cs file being similar to code used in numerous malware/viruses.
My hope is that with this code being available, it will lead to better C# Chrome stealers for the community.
More info is in the Readme.
Anyways, here it is: https://github.com/PhillyStyle/chrome_v20_decryption_CSharp
Edit: I forgot to say that it must be run as administrator to recover Login Info (passwords), or Cookies.
RE: Introducing chrome_v20_decryption_CSharp - DramaKing - Oct 14, 2025
Defender doesn't detect process injection code as malicious?
RE: Introducing chrome_v20_decryption_CSharp - PhillyStyle - Oct 14, 2025
(Oct 14, 2025 03:40 AM)DramaKing Wrote: Defender doesn't detect process injection code as malicious?
This doesn't do process injection. It does process impersonation, which is a way to get the security clearance to get the master password, but not process injection. Check the python code that it is based on, it does the same thing (all be it in a much more elegant manner)
RE: Introducing chrome_v20_decryption_CSharp - OwlBird - Oct 22, 2025
(Oct 14, 2025 03:52 AM)PhillyStyle Wrote: This doesn't do process injection. It does process impersonation, which is a way to get the security clearance to get the master password, but not process injection. Check the python code that it is based on, it does the same thing (all be it in a much more elegant manner)
Bro have you tried on Windows 11, i think you won't have access to impersonation even if you have administrator rights ...
RE: Introducing chrome_v20_decryption_CSharp - PhillyStyle - Oct 22, 2025
(Oct 22, 2025 03:23 AM)OwlBird Wrote: Bro have you tried on Windows 11, i think you won't have access to impersonation even if you have administrator rights ...
Yeah dude. It works great on my Windows 11. You have to run as administrator though or else it won't work.
RE: Introducing chrome_v20_decryption_CSharp - jmark7 - Nov 20, 2025
(Oct 22, 2025 05:49 PM)PhillyStyle Wrote: Yeah dude. It works great on my Windows 11. You have to run as administrator though or else it won't work.
by any chance can we make it work without running as admin or can you add UAC bypass which works with the latest release of Win 11
RE: Introducing chrome_v20_decryption_CSharp - MadScientist - Nov 20, 2025
(Nov 20, 2025 02:43 PM)jmark7 Wrote: by any chance can we make it work without running as admin or can you add UAC bypass which works with the latest release of Win 11
Thats asking a lot for something free, better off finding a method available and implementing it yourself than you can make any tool do that :D
RE: Introducing chrome_v20_decryption_CSharp - I_H8_KDot - Dec 16, 2025
(Oct 13, 2025 10:03 PM)PhillyStyle Wrote: I got to 50 posts, so now I can share some of my work. The first project I am posting of mine, is a Chrome v20 decrypter made in C#.
It can decrypt Login Info (passwords), and Cookies, it can also get history, and download information.
I made this in C# because all I could find was a python example code for v20 passwords. Most of the Chrome password decrypters out there just don't work on v20.
Notes:
- You have to compile yourself.
- It is totally harmless. Not a virus. It simply decrypts / gathers info and prints to screen.
- Windows defender sees it as a virus due to the SQLiteReader.cs file being similar to code used in numerous malware/viruses.
My hope is that with this code being available, it will lead to better C# Chrome stealers for the community.
More info is in the Readme.
Anyways, here it is: https://github.com/PhillyStyle/chrome_v20_decryption_CSharp
Edit: I forgot to say that it must be run as administrator to recover Login Info (passwords), or Cookies.
Bruh you just hardcode the global keys that chrome uses. You'd have to manually change this on every update (and I believe for every browser). You're better off using a different method.