logo

Open Source Network Exploration & Auditing Tool

ID: 89e3bab2-9f3b-5643-affa-7f5c980ab58e

STIX ID: report--89e3bab2-9f3b-5643-affa-7f5c980ab58e

Feed Name: Darknet

Threat Score
75/100

Date Published: 2010-02-02

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool (open-source/red-team oriented) that extracts saved credentials, session cookies, OAuth refresh tokens, credit card details and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox on Windows. It bypasses App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI/NSS secrets where applicable, includes multiple evasion techniques, and outputs structured JSON suitable for rapid session replay and lateral access testing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.