logo

Download Youtube.com & Google Videos With 1 Click

ID: 6c974187-3c77-5b73-8230-1a080745dda0

STIX ID: report--6c974187-3c77-5b73-8230-1a080745dda0

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-04-11

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based browsers (including Chrome, Edge, Brave) and Firefox by bypassing App-Bound Encryption (via DLL injection into a headless Chromium process using the IElevator COM interface) and by extracting DPAPI/NSS-protected data. The tool outputs structured JSON, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, custom SQLite parser), and is presented for red-team assumed-breach exercises but materially increases the risk of lateral movement, cloud account takeover, and persistent access if abused by real attackers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.