logo

Dump Live Session Keys From SSH & Decrypt Traffic On The Fly

ID: 09a5e7d7-84c3-559c-a701-58505a418178

STIX ID: report--09a5e7d7-84c3-559c-a701-58505a418178

Feed Name: Darknet

Threat Score
75/100

Date Published: 2011-05-02

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation credential-extraction tool that targets Chromium- and Gecko-based browsers to harvest saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history by using process injection (Early Bird APC) into a headless Chromium to bypass App-Bound Encryption or by using DPAPI/NSS decryption where applicable; it includes operational evasion features and outputs structured JSON for red-team use while posing a realistic abuse risk for account takeover and lateral movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.