Hacking Tools, Hacker News & Cyber Security
ID: 0bbd6e1a-4f91-5626-940b-b093ddb0b42b
STIX ID: report--0bbd6e1a-4f91-5626-940b-b093ddb0b42b
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored secrets (cookies, saved logins, OAuth tokens, credit cards, autofill and history) across Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chromium (spawning a headless browser and injecting a DLL to use the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and the report outlines usage, attack scenarios, detection signals and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
