Top 15 Security Utilities & Download Hacking Tools
ID: 504eae20-07ff-5dd4-a009-5634db788a12
STIX ID: report--504eae20-07ff-5dd4-a009-5634db788a12
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chromium-based and Firefox). The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS encryption models, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red team assumed‑breach testing while also representing a significant risk if misused by attackers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
