logo

Hacking Tools, Hacker News & Cyber Security

ID: 96c6e22e-1276-5a79-b1b2-8165e85a3e90

STIX ID: report--96c6e22e-1276-5a79-b1b2-8165e85a3e90

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-04-26

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers (including an App‑Bound Encryption bypass using a headless Chromium process, DLL injection and the IElevator COM interface) and Firefox (NSS decryption). The README documents operational usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), detection opportunities, and mitigation recommendations for defenders.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.