Pass-ta-key — Google Password Manager Passkey Extraction
ToolsYesterday, 13:04
Alongside the write-up on the Golden Pass-ta-key technique for extracting the Security Domain Secret (SDS) master key from Chrome’s memory, the researcher has published Pass-ta-key, a proof-of-concept tool for reproducing the technique.
The tool can:
• Extract the SDS from Chrome's process memory during device enrollment or re-enrollment into the security domain;
• Parse locally stored Google Password Manager passkeys records and decrypt their private keys.
• Export private keys in DER and PEM formats, along with metadata containing service domains, usernames, and credential IDs.
Local access to the Chrome's profile and process memory on Windows is required. The profile path must be set in the tool’s source code before compilation.
Vendors
Products