2007 Hacker Reverse Engineering Challenge
ID: 16875248-8f3c-5b80-9aad-49d5d418e56a
STIX ID: report--16875248-8f3c-5b80-9aad-49d5d418e56a
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill and history) from major browsers. It implements a sophisticated App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process (using Early Bird APC and the IElevator COM interface), supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques to reduce EDR detection, and outputs structured JSON for use in red-team or adversary-style operations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
