dsniff Download – Tools for Network Auditing & Password Sniffing
ID: 5fa01bca-5480-549b-8551-61d8453dff0f
STIX ID: report--5fa01bca-5480-549b-8551-61d8453dff0f
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI extraction for some Chromium forks and NSS decryption for Firefox, and includes operational evasion features; the report covers usage, an attack scenario, detection opportunities, and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
