Acunetix Vulnerability Scanner For Linux Now Available
ID: 49914e62-ca79-591b-a313-9af213879589
STIX ID: report--49914e62-ca79-591b-a313-9af213879589
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth tokens, credit cards, autofill, history) from major Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for modern Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, retrieves DPAPI or NSS keys as appropriate, and writes structured JSON output; the tool includes multiple evasion techniques and is intended for red-team/assumed-breach testing but could be repurposed by attackers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
