Some Good Tips to Secure Linux
ID: 42d5d38a-2bb7-5529-8ddf-0edeccf72526
STIX ID: report--42d5d38a-2bb7-5529-8ddf-0edeccf72526
Feed Name: Darknet
DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill entries, history, and bookmarks) from Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt the app_bound_encrypted_key (and uses DPAPI/NSS for other browsers), includes multiple evasion techniques, outputs structured JSON, and is intended for red-team/assumed‑breach testing while also being usable by malicious actors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
