logo

Hacking Tools, Hacker News & Cyber Security

ID: 5bb89d6d-b387-5b8c-9187-c2fa6c7c8824

STIX ID: report--5bb89d6d-b387-5b8c-9187-c2fa6c7c8824

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-05-03

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a public post‑exploitation tool designed to extract browser‑stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, uses DPAPI or NSS decryption where applicable, includes multiple operational evasion features, outputs structured JSON, and is presented as a red‑team tool useful for assessing the blast radius of compromised developer endpoints.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.