Web Based Interface For Ophcrack Password Cracking Tool
ID: 34e9295c-e63a-54a3-b76e-b38908f72df1
STIX ID: report--34e9295c-e63a-54a3-b76e-b38908f72df1
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool for harvesting browser-stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Gecko-based browsers. It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is positioned for red-team/assumed-breach use to demonstrate the risk of browser-stored credentials for lateral movement and cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
