logo

An Introduction to AJAX

ID: 51bf682c-f713-5244-91b0-6cd1ad5ecfde

STIX ID: report--51bf682c-f713-5244-91b0-6cd1ad5ecfde

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-03-18

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox; it implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption where applicable, includes multiple operational evasion features, outputs structured JSON, and is positioned for red-team/assumed-breach use while highlighting detection and mitigation opportunities.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.