Integrated Platform For Attacking Web Applications
ID: 665ddbca-c94b-5a75-848d-aacab41f04b9
STIX ID: report--665ddbca-c94b-5a75-848d-aacab41f04b9
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that extracts browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by bypassing App-Bound Encryption (Chrome 127+) using a headless Chromium process, DLL injection (Early Bird APC), and the IElevator COM interface; it also handles DPAPI and NSS-encrypted stores, outputs structured JSON, includes operational evasion features, and is intended for red-team assumed-breach testing but presents a high-risk capability if misused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
