logo

LiveCD Linux Distro for Wireless Penetration Testing & WEP Cracking

ID: 2ed4d4c0-68a7-5de3-bcbd-2ea9b0ec3650

STIX ID: report--2ed4d4c0-68a7-5de3-bcbd-2ea9b0ec3650

Feed Name: Darknet

Threat Score
78/100

Date Published: 2008-02-19

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox. It implements a technical bypass for Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, outputs structured JSON for red-team use, and poses a significant risk to developer and enterprise workstations if used by malicious actors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.