Dump Live Session Keys From SSH & Decrypt Traffic On The Fly
ID: 09a5e7d7-84c3-559c-a701-58505a418178
STIX ID: report--09a5e7d7-84c3-559c-a701-58505a418178
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-extraction tool that targets Chromium- and Gecko-based browsers to harvest saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history by using process injection (Early Bird APC) into a headless Chromium to bypass App-Bound Encryption or by using DPAPI/NSS decryption where applicable; it includes operational evasion features and outputs structured JSON for red-team use while posing a realistic abuse risk for account takeover and lateral movement.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
