logo

Hacking Tools, Hacker News & Cyber Security

ID: 6a347137-ee5d-53aa-867b-c1dc587b27c0

STIX ID: report--6a347137-ee5d-53aa-867b-c1dc587b27c0

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-12-19

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, cookies, OAuth tokens, credit cards, autofill and history) across Chromium-based browsers and Firefox by bypassing protections such as App-Bound Encryption (via IElevator COM inside an injected DLL) and DPAPI/NSS; it outputs structured JSON, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is intended for red team assumed-breach testing but could enable rapid cloud account takeover and lateral movement if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.