logo

Multi-threaded Service & URL Brute Forcing Tool

ID: 43078527-7b5e-5839-98a6-e96e817b620e

STIX ID: report--43078527-7b5e-5839-98a6-e96e817b620e

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-06-08

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool aimed at extracting browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history) from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS for other browsers, includes multiple evasion features for red-team/attacker operational use, outputs structured JSON, and includes guidance on detection and mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.