Anteater – CI/CD Security Gate Check Framework
ID: 571952d5-5a19-572f-9785-c970db49a265
STIX ID: report--571952d5-5a19-572f-9785-c970db49a265
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS for other browsers, includes multiple operational evasion features, and outputs structured JSON for red team or adversary use; the report details detection opportunities and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
