logo

Hacking Tools, Hacker News & Cyber Security

ID: 54c5b97e-900f-5614-b24d-e7405b777535

STIX ID: report--54c5b97e-900f-5614-b24d-e7405b777535

Feed Name: Darknet

Threat Score
78/100

Date Published: 2009-05-27

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox by bypassing App‑Bound Encryption (Chrome 127+) through DLL injection into a headless Chromium process via the IElevator COM interface; it includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser) and outputs structured JSON for red-team use but represents a high-risk credential-theft capability that can enable cloud account takeover.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.