logo

Metasploit Framework v3.1 Released for Download

ID: 8e4a5ea0-145f-5aec-8f1e-249f2f212609

STIX ID: report--8e4a5ea0-145f-5aec-8f1e-249f2f212609

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-01-29

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card and autofill data, and browsing history from Chromium‑based browsers and Firefox on Windows. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt the app_bound_encrypted_key, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and is positioned as a red‑team tool useful for assessing the real-world blast radius of compromised developer workstations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.