Hacking Tools, Hacker News & Cyber Security
ID: 5eb48005-1775-5521-ba86-a2a9692645fc
STIX ID: report--5eb48005-1775-5521-ba86-a2a9692645fc
Feed Name: Darknet
## Executive summary DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based and Firefox browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, uses DPAPI extraction for Opera/Vivaldi, and NSS decryption for Firefox; the tool includes operational evasion features and outputs structured JSON for red‑team use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
