ChromeAlone: Transforming a Browser into a C2 Platform

This recording is not on YouTube. The button opens the file on the DEF CON media server.

Summary

The talk shows how legacy and newer Chrome features can be used to mimic a conventional command-and-control implant while avoiding traditional endpoint protection. ChromeAlone proxies raw TCP, phishes for YubiKey codes, dumps cookies and credentials, keylogs browser windows, and runs shell commands. It sideloads components without user interaction and obfuscates code with WebAssembly.