Passive Wifi Sniffing Tool With Location Data
ID: 393f2faa-c8be-5931-a5ca-f793ab746429
STIX ID: report--393f2faa-c8be-5931-a5ca-f793ab746429
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from major Chromium‑based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI or NSS decryption where applicable, includes injection and evasion techniques (Early Bird APC, PPID/argument spoofing, API hashing), and outputs structured JSON for red‑team use and testing of endpoint controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
