logo

Hacking Tools, Hacker News & Cyber Security

ID: 5be25d09-db2d-57e2-8460-1496f62401de

STIX ID: report--5be25d09-db2d-57e2-8460-1496f62401de

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-05-18

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Firefox browsers by using techniques such as spawning a headless Chromium process, Early Bird APC DLL injection to leverage the IElevator COM interface (bypassing App‑Bound Encryption), DPAPI and NSS decryption, and multiple evasion features; it outputs structured JSON of extracted credentials suitable for session replay and lateral access, making it a high‑risk capability for cloud account takeover and developer workstation compromise.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.