logo

Anonymous Twitter Alternative Created For Protesters & Revolutionaries

ID: 99ce82b0-6578-5d4e-bbb4-19702e655523

STIX ID: report--99ce82b0-6578-5d4e-bbb4-19702e655523

Feed Name: Darknet

Threat Score
75/100

Date Published: 2011-10-03

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from major Chromium-based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key, retrieves DPAPI or NSS-protected secrets for other browsers, includes multiple evasion techniques, and outputs structured JSON for red-team or offensive use — posing a high-risk credential and session takeover vector for enterprises.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.