PEEP Post-Exploitation Toolkit Targets Google Chrome and Microsoft Edge
PEEP is a specialized post-exploitation toolkit targeting Chromium-based browsers, specifically Google Chrome and Microsoft Edge. Deployed as a secondary-stage payload following initial administrative compromise or arbitrary code execution (ACE), PEEP achieves persistence by injecting malicious extensions directly into browser profile directories. The toolkit bypasses Web Store validation and suppresses installation prompts by forging "Secure Preferences" integrity values. By leveraging the Native Messaging API, PEEP establishes a communication bridge between the browser environment and the host operating system, enabling arbitrary shell command execution, credential exfiltration, and session hijacking, effectively transforming the browser into a stealthy command-and-control node.