An Introduction to AJAX
ID: 51bf682c-f713-5244-91b0-6cd1ad5ecfde
STIX ID: report--51bf682c-f713-5244-91b0-6cd1ad5ecfde
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox; it implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption where applicable, includes multiple operational evasion features, outputs structured JSON, and is positioned for red-team/assumed-breach use while highlighting detection and mitigation opportunities.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
