Nipe – Make Tor Default Gateway For Network
ID: 89720e14-1d7c-5fa8-832b-a1dd9ab53950
STIX ID: report--89720e14-1d7c-5fa8-832b-a1dd9ab53950
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox by bypassing App-Bound Encryption (via headless Chromium + DLL injection and IElevator COM) and extracting DPAPI/NSS-protected secrets; it outputs structured JSON, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and the report provides usage examples, detection opportunities, and mitigations for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
