Open Source Network Exploration & Auditing Tool
ID: 89e3bab2-9f3b-5643-affa-7f5c980ab58e
STIX ID: report--89e3bab2-9f3b-5643-affa-7f5c980ab58e
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool (open-source/red-team oriented) that extracts saved credentials, session cookies, OAuth refresh tokens, credit card details and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox on Windows. It bypasses App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI/NSS secrets where applicable, includes multiple evasion techniques, and outputs structured JSON suitable for rapid session replay and lateral access testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
