logo

Hacking Tools, Hacker News & Cyber Security

ID: 697fbebd-ef30-5fce-9dc7-a0375912683c

STIX ID: report--697fbebd-ef30-5fce-9dc7-a0375912683c

Feed Name: Darknet

Threat Score
70/100

Date Published: 2008-02-13

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that extracts saved logins, cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chromium-based (Chrome, Edge, Brave, Opera variants) and Firefox browsers by using techniques such as headless Chromium spawning, Early Bird APC DLL injection and an IElevator COM bypass to defeat App‑Bound Encryption (and DPAPI/NSS decryption where applicable); it outputs structured JSON for red-team use and presents a high-risk capability for cloud account takeover and lateral movement if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.