Metasploit Framework v3.1 Released for Download
ID: 8e4a5ea0-145f-5aec-8f1e-249f2f212609
STIX ID: report--8e4a5ea0-145f-5aec-8f1e-249f2f212609
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card and autofill data, and browsing history from Chromium‑based browsers and Firefox on Windows. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt the app_bound_encrypted_key, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and is positioned as a red‑team tool useful for assessing the real-world blast radius of compromised developer workstations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
