logo

SQL Power Injector v1.1 Released

ID: 1f7535e9-7c4a-5049-a32f-fea9af016d43

STIX ID: report--1f7535e9-7c4a-5049-a32f-fea9af016d43

Feed Name: Darknet

Threat Score
70/100

Date Published: 2006-06-14

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post‑exploitation browser credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and uses NSS decryption for Firefox; it outputs structured JSON and includes multiple evasion techniques for red‑team or offensive testing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.