Windows Freeware to Detects Insecure Wireless Networks
ID: 57163d15-81ba-577f-ba18-718fe1fa9b02
STIX ID: report--57163d15-81ba-577f-ba18-718fe1fa9b02
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit card data, autofill and history) across Chromium-based browsers and Firefox; it includes an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM) and supports DPAPI/NSS decryption for other browsers. The README documents usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), output formats, an attack scenario for assumed-breach/red-team use, and defensive detection/mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
