logo

Generate A Unique Strong Password For Every Website

ID: 82fb3825-7ff2-5e33-af58-97625abea6e1

STIX ID: report--82fb3825-7ff2-5e33-af58-97625abea6e1

Feed Name: Darknet

Threat Score
78/100

Date Published: 2014-08-18

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history) from major Chromium-based and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface, handles DPAPI for some browsers, and uses NSS decryption for Firefox; the tool includes evasion features and outputs structured JSON for red-team use and testing of endpoint controls.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.