logo

Acunetix Vulnerability Scanner For Linux Now Available

ID: 49914e62-ca79-591b-a313-9af213879589

STIX ID: report--49914e62-ca79-591b-a313-9af213879589

Feed Name: Darknet

Threat Score
75/100

Date Published: 2018-12-19

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth tokens, credit cards, autofill, history) from major Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for modern Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, retrieves DPAPI or NSS keys as appropriate, and writes structured JSON output; the tool includes multiple evasion techniques and is intended for red-team/assumed-breach testing but could be repurposed by attackers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.