Multi-Protocol Fuzzing Toolkit (Supports HTTP/FTP/IMAP etc)
ID: 59419569-9689-528d-beb4-f7f8ecdb23bd
STIX ID: report--59419569-9689-528d-beb4-f7f8ecdb23bd
Feed Name: Darknet
**DumpBrowserSecrets** is a publicly distributed Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from major Chromium- and Gecko-based browsers by using headless Chromium + Early Bird APC DLL injection and an IElevator COM bypass for App‑Bound Encryption, with additional DPAPI and NSS handling and several operational evasion techniques; it is presented for red-team use but presents a high-risk credential theft vector for enterprise developer endpoints and cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
