logo

Web Based Interface For Ophcrack Password Cracking Tool

ID: 34e9295c-e63a-54a3-b76e-b38908f72df1

STIX ID: report--34e9295c-e63a-54a3-b76e-b38908f72df1

Feed Name: Darknet

Threat Score
75/100

Date Published: 2011-03-18

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a Windows post-exploitation tool for harvesting browser-stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Gecko-based browsers. It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is positioned for red-team/assumed-breach use to demonstrate the risk of browser-stored credentials for lateral movement and cloud account takeover.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.