Hacking Tools, Hacker News & Cyber Security
ID: 8970d114-8df9-53e1-bb7e-dad0a528a95d
STIX ID: report--8970d114-8df9-53e1-bb7e-dad0a528a95d
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that extracts credentials and session material from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS), using DLL injection into a headless Chromium process to call the IElevator COM interface and retrieve encryption keys; it outputs structured JSON, includes multiple operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is positioned for red‑team assumed‑breach testing while also representing a high‑value capability for attackers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
