logo

BackTrack 4 Pre Release Available For Download

ID: 982deaa2-3447-50d5-af8a-516f6a7582bd

STIX ID: report--982deaa2-3447-50d5-af8a-516f6a7582bd

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-06-25

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and tokens from major Chromium and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless browser and performing Early Bird APC DLL injection to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple evasion features; recovered artifacts (cookies, OAuth refresh tokens, saved credentials) enable lateral movement and cloud account takeover, making it a high‑impact tool for red teams and real attackers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.