Hacking Tools, Hacker News & Cyber Security
ID: 96c6e22e-1276-5a79-b1b2-8165e85a3e90
STIX ID: report--96c6e22e-1276-5a79-b1b2-8165e85a3e90
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers (including an App‑Bound Encryption bypass using a headless Chromium process, DLL injection and the IElevator COM interface) and Firefox (NSS decryption). The README documents operational usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), detection opportunities, and mitigation recommendations for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
