logo

Top 15 Security Utilities & Download Hacking Tools

ID: 504eae20-07ff-5dd4-a009-5634db788a12

STIX ID: report--504eae20-07ff-5dd4-a009-5634db788a12

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-04-16

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chromium-based and Firefox). The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS encryption models, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red team assumed‑breach testing while also representing a significant risk if misused by attackers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.