Hacking Tools, Hacker News & Cyber Security
ID: 5be25d09-db2d-57e2-8460-1496f62401de
STIX ID: report--5be25d09-db2d-57e2-8460-1496f62401de
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Firefox browsers by using techniques such as spawning a headless Chromium process, Early Bird APC DLL injection to leverage the IElevator COM interface (bypassing App‑Bound Encryption), DPAPI and NSS decryption, and multiple evasion features; it outputs structured JSON of extracted credentials suitable for session replay and lateral access, making it a high‑risk capability for cloud account takeover and developer workstation compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
