SQL Power Injector v1.1 Released
ID: 1f7535e9-7c4a-5049-a32f-fea9af016d43
STIX ID: report--1f7535e9-7c4a-5049-a32f-fea9af016d43
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation browser credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and uses NSS decryption for Firefox; it outputs structured JSON and includes multiple evasion techniques for red‑team or offensive testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
