logo

Network Security Monitoring & Analysis LiveCD

ID: 227dff4f-c8cc-5ab8-a0ab-a99b604968bb

STIX ID: report--227dff4f-c8cc-5ab8-a0ab-a99b604968bb

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-08-13

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, and handles DPAPI and NSS decryption for other browsers; the tool includes evasion features, outputs structured JSON, and is intended for red‑team testing while also posing a high operational risk if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.