logo

Integrated Platform For Attacking Web Applications

ID: 665ddbca-c94b-5a75-848d-aacab41f04b9

STIX ID: report--665ddbca-c94b-5a75-848d-aacab41f04b9

Feed Name: Darknet

Threat Score
78/100

Date Published: 2010-01-22

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that extracts browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by bypassing App-Bound Encryption (Chrome 127+) using a headless Chromium process, DLL injection (Early Bird APC), and the IElevator COM interface; it also handles DPAPI and NSS-encrypted stores, outputs structured JSON, includes operational evasion features, and is intended for red-team assumed-breach testing but presents a high-risk capability if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.